From 6935faaa362852c58acc3f20a611b5419e8e5965 Mon Sep 17 00:00:00 2001 From: Ilia Alshanetsky Date: Wed, 3 Dec 2008 01:04:33 +0000 Subject: [PATCH] MFB: Fixed bug #46731 (Missing validation for the options parameter of the imap_fetch_overview() function). --- ext/imap/php_imap.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c index 67d0fedf04..b43a8bb2e6 100644 --- a/ext/imap/php_imap.c +++ b/ext/imap/php_imap.c @@ -3159,11 +3159,16 @@ PHP_FUNCTION(imap_fetch_overview) return; } + if (flags && !(flags & FT_UID)) { + php_error_docref(NULL TSRMLS_CC, E_WARNING, "invalid value for the options parameter"); + RETURN_FALSE; + } + ZEND_FETCH_RESOURCE(imap_le_struct, pils *, &streamind, -1, "imap", le_imap); array_init(return_value); - - status = (flags & FT_UID) + + status = (flags & FT_UID) ? mail_uid_sequence(imap_le_struct->imap_stream, sequence) : mail_sequence(imap_le_struct->imap_stream, sequence); -- 2.50.1