summaryrefslogtreecommitdiff
path: root/www/php4/patches/patch-aw
diff options
context:
space:
mode:
Diffstat (limited to 'www/php4/patches/patch-aw')
-rw-r--r--www/php4/patches/patch-aw14
1 files changed, 14 insertions, 0 deletions
diff --git a/www/php4/patches/patch-aw b/www/php4/patches/patch-aw
new file mode 100644
index 00000000000..1924f88efb2
--- /dev/null
+++ b/www/php4/patches/patch-aw
@@ -0,0 +1,14 @@
+$NetBSD: patch-aw,v 1.2.8.1 2007/08/06 21:13:15 ghen Exp $
+
+Fix for CVE-2007-3806.
+
+--- ext/standard/dir.c.orig 2007-01-01 18:46:47.000000000 +0900
++++ ext/standard/dir.c
+@@ -382,6 +382,7 @@ PHP_FUNCTION(glob)
+ }
+ #endif
+
++ memset(&globbuf, 0, sizeof(glob_t));
+ globbuf.gl_offs = 0;
+ if (0 != (ret = glob(pattern, flags & GLOB_FLAGMASK, NULL, &globbuf))) {
+ #ifdef GLOB_NOMATCH