News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

PHP Security Blog:
Chunk_split() Overflow not fixed at all...
June 05, 2007 @ 07:41:00

In this new post to the PHP Security blog, Stefan Esser points out that an issue that was previously marked as corrected - a problem with the chunk_split function - hasn't completely been corrected.

This [bugfix] fixes the chunk_split() overflow (found by SEC-CONSULT) that was according to the PHP 5.2.3 release notes already fixed. The original fix was however not only broken but complete nonsense. If you can read C you will see that the integer overflow was not fixed in PHP 5.2.3 but simply moved into a separate line and an additional bogus if clause was added.

Stefan includes a simple four line code example to illustrate his point.

0 comments voice your opinion now!
chunksplit overflow bug chunksplit overflow bug


blog comments powered by Disqus

Similar Posts

Wez Furlong\'s Blog: Calling SQLBindParameter and avoiding a datetime overflow.

Pierre-Alain Joye's Blog: Updates to htscanner and zip PECL pacakges

PHPClasses.org: Lately in PHP Episode 15 - PHP 5.3.8 Upgrade, PHP 5.4 beta, Wrong Ideas About PHP

Christian Weiske: PHP 5.6: Large file upload support

Brian Moon's Blog: PHP 5.3 and mysqlnd - Unexpected results


Community Events





Don't see your event here?
Let us know!


introduction laravel list release bugfix language interview framework community voicesoftheelephpant library deployment tips developer conference api symfony zendserver series podcast

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework