From e9e860a05be187862a0213f8c6c58aff2293bb22 Mon Sep 17 00:00:00 2001 From: x-xiang Date: Wed, 8 Mar 2017 11:43:14 +0800 Subject: [PATCH] Don't retain mt_rand() seeds across requests In particular, this prevents manual seeding of mt_rand() to leak across requests. --- ext/standard/basic_functions.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ext/standard/basic_functions.c b/ext/standard/basic_functions.c index aaf4301d64..4784a216e1 100644 --- a/ext/standard/basic_functions.c +++ b/ext/standard/basic_functions.c @@ -3810,6 +3810,8 @@ PHP_RSHUTDOWN_FUNCTION(basic) /* {{{ */ zend_hash_destroy(&BG(putenv_ht)); #endif + BG(mt_rand_is_seeded) = 0; + if (BG(umask) != -1) { umask(BG(umask)); } -- 2.50.1