cvs: pearweb /public_html install-pear-nozlib.phar

cellog          Mon Mar 20 22:47:23 2006 UTC

  Modified files:              
    /pearweb/public_html        install-pear-nozlib.phar 
  Log:
  fix Bug #7110: mapPhar security error
  
http://cvs.php.net/viewcvs.cgi/pearweb/public_html/install-pear-nozlib.phar?r1=1.12&r2=1.13&diff_format=u
Index: pearweb/public_html/install-pear-nozlib.phar
diff -u pearweb/public_html/install-pear-nozlib.phar:1.12 
pearweb/public_html/install-pear-nozlib.phar:1.13
--- pearweb/public_html/install-pear-nozlib.phar:1.12   Sat Mar 11 04:20:29 2006
+++ pearweb/public_html/install-pear-nozlib.phar        Mon Mar 20 22:47:22 2006
@@ -128,6 +128,7 @@
      */
     public static final function mapPhar($file, $dataoffset)
     {
+        $file = realpath($file);
         // this ensures that this is safe
         if (!in_array($file, get_included_files())) {
             die('SECURITY ERROR: PHP_Archive::mapPhar can only be called from 
within ' .
@@ -637,12 +638,12 @@
 
 require_once 'phar://install-pear-nozlib.phar/index.php';
 __HALT_COMPILER(); 
------++++++ /* vim: set ts=4 sw=4: */
 // +----------------------------------------------------------------------+
 // | PHP Version 4                                                        |