Pullup tickets 2161-2163 - requested by taca

security fix for php

- pkgsrc/lang/php5/Makefile				1.56
- pkgsrc/lang/php5/distinfo				1.45
- pkgsrc/lang/php5/patches/patch-ad			1.1
- pkgsrc/lang/php5/patches/patch-ae			1.1
- pkgsrc/www/ap-php/Makefile				1.15
- pkgsrc/www/php4/Makefile				1.79
- pkgsrc/www/php4/distinfo				1.66
- pkgsrc/www/php4/patches/patch-aw			1.3

   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Aug  1 01:40:55 UTC 2007

   Modified Files:
	   pkgsrc/www/php4: Makefile distinfo
   Added Files:
	   pkgsrc/www/php4/patches: patch-aw

   Log Message:
   Add patches to fix CVE-2007-3806 referring CVS repository.

   Bump PKGREVISION.
---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Aug  1 01:40:08 UTC 2007

   Modified Files:
	   pkgsrc/lang/php5: Makefile distinfo
   Added Files:
	   pkgsrc/lang/php5/patches: patch-ad patch-ae

   Log Message:
   - Add patches to fix CVE-2007-3806 referring CVS repository.
   - Fix compile problem on NetBSD with mremap(2).

   Bump PKGREVISION.
---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Aug  2 15:10:04 UTC 2007

   Modified Files:
	   pkgsrc/www/ap-php: Makefile

   Log Message:
   Update of www/php5 package affects ap-php, too.

   So, bump PKGREVISION.

   (I just forgot to commit.)

1 files changed, 14 insertions, 0 deletions

diff --git a/www/php4/patches/patch-aw b/www/php4/patches/patch-aw
new file mode 100644
index 00000000000..1924f88efb2
--- /dev/null
+++ b/www/php4/patches/patch-aw
@@ -0,0 +1,14 @@
+$NetBSD: patch-aw,v 1.2.8.1 2007/08/06 21:13:15 ghen Exp $
+
+Fix for CVE-2007-3806.
+
+--- ext/standard/dir.c.orig	2007-01-01 18:46:47.000000000 +0900
++++ ext/standard/dir.c
+@@ -382,6 +382,7 @@ PHP_FUNCTION(glob)
+ 	} 
+ #endif
+ 
++	memset(&globbuf, 0, sizeof(glob_t));
+ 	globbuf.gl_offs = 0;
+ 	if (0 != (ret = glob(pattern, flags & GLOB_FLAGMASK, NULL, &globbuf))) {
+ #ifdef GLOB_NOMATCH