diff options
| author | Rasmus Lerdorf <rasmus@php.net> | 2012-03-25 05:32:21 +0530 |
|---|---|---|
| committer | Rasmus Lerdorf <rasmus@php.net> | 2012-03-25 05:32:21 +0530 |
| commit | 900778731c49611e1318e4d1839768eb46f26813 (patch) | |
| tree | 6538dd987d9b232e1bdb8578bd70c516376c9bbc | |
| parent | 24a57ae9a5e3e3bc5472a901e0eaff4d70eb281a (diff) | |
| download | php-git-900778731c49611e1318e4d1839768eb46f26813.tar.gz | |
open_basedir check for linkinfo
| -rw-r--r-- | ext/standard/link.c | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/ext/standard/link.c b/ext/standard/link.c index 9fa2524faf..cb42408f6d 100644 --- a/ext/standard/link.c +++ b/ext/standard/link.c @@ -94,7 +94,8 @@ PHP_FUNCTION(readlink) PHP_FUNCTION(linkinfo) { char *link; - int link_len; + char *dirname; + int link_len, dir_len; struct stat sb; int ret; @@ -102,12 +103,22 @@ PHP_FUNCTION(linkinfo) return; } + dirname = estrndup(link, link_len); + dir_len = php_dirname(dirname, link_len); + + if (php_check_open_basedir(dirname TSRMLS_CC)) { + efree(dirname); + RETURN_FALSE; + } + ret = VCWD_LSTAT(link, &sb); if (ret == -1) { php_error_docref(NULL TSRMLS_CC, E_WARNING, "%s", strerror(errno)); + efree(dirname); RETURN_LONG(-1L); } + efree(dirname); RETURN_LONG((long) sb.st_dev); } /* }}} */ |