raven-rhel6/isp-php53/lsapi_printf.patch
2024-02-21 20:14:44 +06:00

17 lines
594 B
Diff

fix printf format possible vulnreability
probably puts or fwrite would be better code here if no printf formatting is needed
Signed-Off-By: Elan Ruusamäe <glen@delfi.ee>
--- php-5.4.7/sapi/litespeed/lsapi_main.c~ 2012-10-05 22:18:46.000000000 +0300
+++ php-5.4.7/sapi/litespeed/lsapi_main.c 2012-10-06 13:18:16.356066962 +0300
@@ -603,7 +603,7 @@
" args... Arguments passed to script.\n";
php_output_startup();
php_output_activate(TSRMLS_C);
- php_printf( usage );
+ php_printf( "%s", usage );
#ifdef PHP_OUTPUT_NEWAPI
php_output_end_all(TSRMLS_C);
#else