From 183267dc2916d1bcd7673fc8285f3fc1fc414462 Mon Sep 17 00:00:00 2001 From: Ilia Alshanetsky Date: Thu, 28 Feb 2008 00:51:56 +0000 Subject: [PATCH] MFB: Fixed security issue detailed in CVE-2008-0599 --- sapi/cgi/cgi_main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sapi/cgi/cgi_main.c b/sapi/cgi/cgi_main.c index 257e6fcbb4..86efb43b2a 100644 --- a/sapi/cgi/cgi_main.c +++ b/sapi/cgi/cgi_main.c @@ -1101,7 +1101,7 @@ static void init_request_info(TSRMLS_D) ) { /* PATH_TRANSLATED = PATH_TRANSLATED - SCRIPT_NAME + PATH_INFO */ int ptlen = strlen(pt) - strlen(env_script_name); - int path_translated_len = ptlen + env_path_info ? strlen(env_path_info) : 0; + int path_translated_len = ptlen + (env_path_info ? strlen(env_path_info) : 0); char *path_translated = NULL; path_translated = (char *) emalloc(path_translated_len + 1); -- 2.50.1