summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--Changelog1
-rw-r--r--ifilter.c6
2 files changed, 4 insertions, 3 deletions
diff --git a/Changelog b/Changelog
index 5fd728d..9bc62e9 100644
--- a/Changelog
+++ b/Changelog
@@ -10,6 +10,7 @@
10 - Added some test cases for various things 10 - Added some test cases for various things
11 - Added suhosin.log.stdout to log to stdout (for debugging purposes only) 11 - Added suhosin.log.stdout to log to stdout (for debugging purposes only)
12 - Add ini_set() fail mode to suhosin.disable.display_errors 12 - Add ini_set() fail mode to suhosin.disable.display_errors
13 - Fix suhosin.get/post/cookie.max_totalname_length filter
13 - TODO: WARN THAT FUNCTION WHITELISTS/BLACKLISTS NEVER WORKED CORRECTLY WITH PHP < 5.5 14 - TODO: WARN THAT FUNCTION WHITELISTS/BLACKLISTS NEVER WORKED CORRECTLY WITH PHP < 5.5
14 15
152012-02-12 - 0.9.34 162012-02-12 - 0.9.34
diff --git a/ifilter.c b/ifilter.c
index d231bc5..42f5d9b 100644
--- a/ifilter.c
+++ b/ifilter.c
@@ -463,7 +463,7 @@ unsigned int suhosin_input_filter(int arg, char *var, char **val, unsigned int v
463 return 0; 463 return 0;
464 } 464 }
465 } 465 }
466 if (SUHOSIN_G(max_get_totalname_length) && SUHOSIN_G(max_get_totalname_length) < var_len) { 466 if (SUHOSIN_G(max_get_totalname_length) && SUHOSIN_G(max_get_totalname_length) < total_len) {
467 suhosin_log(S_VARS, "configured GET variable total name length limit exceeded - dropped variable '%s'", var); 467 suhosin_log(S_VARS, "configured GET variable total name length limit exceeded - dropped variable '%s'", var);
468 if (!SUHOSIN_G(simulation)) { 468 if (!SUHOSIN_G(simulation)) {
469 return 0; 469 return 0;
@@ -477,7 +477,7 @@ unsigned int suhosin_input_filter(int arg, char *var, char **val, unsigned int v
477 return 0; 477 return 0;
478 } 478 }
479 } 479 }
480 if (SUHOSIN_G(max_cookie_totalname_length) && SUHOSIN_G(max_cookie_totalname_length) < var_len) { 480 if (SUHOSIN_G(max_cookie_totalname_length) && SUHOSIN_G(max_cookie_totalname_length) < total_len) {
481 suhosin_log(S_VARS, "configured COOKIE variable total name length limit exceeded - dropped variable '%s'", var); 481 suhosin_log(S_VARS, "configured COOKIE variable total name length limit exceeded - dropped variable '%s'", var);
482 if (!SUHOSIN_G(simulation)) { 482 if (!SUHOSIN_G(simulation)) {
483 return 0; 483 return 0;
@@ -491,7 +491,7 @@ unsigned int suhosin_input_filter(int arg, char *var, char **val, unsigned int v
491 return 0; 491 return 0;
492 } 492 }
493 } 493 }
494 if (SUHOSIN_G(max_post_totalname_length) && SUHOSIN_G(max_post_totalname_length) < var_len) { 494 if (SUHOSIN_G(max_post_totalname_length) && SUHOSIN_G(max_post_totalname_length) < total_len) {
495 suhosin_log(S_VARS, "configured POST variable total name length limit exceeded - dropped variable '%s'", var); 495 suhosin_log(S_VARS, "configured POST variable total name length limit exceeded - dropped variable '%s'", var);
496 if (!SUHOSIN_G(simulation)) { 496 if (!SUHOSIN_G(simulation)) {
497 return 0; 497 return 0;