/[gentoo-x86]/dev-php/jpgraph/files/cve-2009-4422.patch
Gentoo

Contents of /dev-php/jpgraph/files/cve-2009-4422.patch

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.1 - (show annotations) (download)
Mon Jun 11 15:12:54 2012 UTC (11 months, 1 week ago) by mabi
Branch: MAIN
CVS Tags: HEAD
bump to fix security issue (bug #303745), also move jpgraph install path to /usr/share/php/jpgraph (losing the src part)

(Portage version: 2.2.0_alpha110/cvs/Linux x86_64)

1 diff -ur jpgraph-3.0.7.orig/src/jpgraph.php jpgraph-3.0.7/src/jpgraph.php
2 --- jpgraph-3.0.7.orig/src/jpgraph.php 1970-01-01 10:13:08.000000000 +0100
3 +++ jpgraph-3.0.7/src/jpgraph.php 2012-06-11 14:55:18.557995018 +0200
4 @@ -1286,11 +1286,11 @@
5 while( list($key,$value) = each($_GET) ) {
6 if( is_array($value) ) {
7 foreach ( $value as $k => $v ) {
8 - $urlarg .= '&'.$key.'%5B'.$k.'%5D='.urlencode($v);
9 + $urlarg .= '&'.urlencode($key).'%5B'.$k.'%5D='.urlencode($v);
10 }
11 }
12 else {
13 - $urlarg .= '&'.$key.'='.urlencode($value);
14 + $urlarg .= '&'.urlencode($key).'='.urlencode($value);
15 }
16 }
17
18 @@ -1301,11 +1301,11 @@
19 while( list($key,$value) = each($_POST) ) {
20 if( is_array($value) ) {
21 foreach ( $value as $k => $v ) {
22 - $urlarg .= '&'.$key.'%5B'.$k.'%5D='.urlencode($v);
23 + $urlarg .= '&'.htmlentities($key).'%5B'.$k.'%5D='.htmlentities($v);
24 }
25 }
26 else {
27 - $urlarg .= '&'.$key.'='.urlencode($value);
28 + $urlarg .= '&'.htmlentities($key).'='.htmlentities($value);
29 }
30 }
31

  ViewVC Help
Powered by ViewVC 1.1.17