From d771fa6da1560a085989bc7deb1d6d11004c5e0a Mon Sep 17 00:00:00 2001 From: Nuno Lopes Date: Sun, 6 Jul 2008 15:23:31 +0000 Subject: [PATCH] fix CVE-2008-2371. patch by Tavis Ormandy # currently there's no release of PCRE with this fix. PCRE's author recommended applying this patch in the meantime --- ext/pcre/pcrelib/pcre_compile.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ext/pcre/pcrelib/pcre_compile.c b/ext/pcre/pcrelib/pcre_compile.c index 51a51e1253..0f3ebf93fd 100644 --- a/ext/pcre/pcrelib/pcre_compile.c +++ b/ext/pcre/pcrelib/pcre_compile.c @@ -4929,7 +4929,7 @@ we set the flag only if there is a literal "\r" or "\n" in the class. */ (lengthptr == NULL || *lengthptr == 2 + 2*LINK_SIZE)) { cd->external_options = newoptions; - options = newoptions; + options = *optionsptr = newoptions; } else { -- 2.50.1