Attachment 166710 Details for Bug 207001 – CVE-2009-4422

[patch] CVE-2009-4422

jpgraph2.txt (text/plain), 1.86 KB, created by Sevan Janiyan on 2016-02-07 15:40:52 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Sevan Janiyan

Created: 2016-02-07 15:40:52 UTC

Size: 1.86 KB

patch

obsolete

>===> Generating patch
>===> Viewing diff with more
>diff -ruN ../jpgraph2.orig/Makefile ./Makefile
>--- ../jpgraph2.orig/Makefile	2016-02-07 15:30:36.503086000 +0000
>+++ ./Makefile	2016-02-07 15:37:23.905634000 +0000
>@@ -3,6 +3,7 @@
> 
> PORTNAME=	jpgraph
> PORTVERSION=	3.0.7
>+PORTREVISION=	1
> CATEGORIES=	graphics
> MASTER_SITES=	http://hem.bredband.net/jpgraph2/
> PKGNAMESUFFIX=	2
>diff -ruN ../jpgraph2.orig/files/patch-src_jpgraph.php ./files/patch-src_jpgraph.php
>--- ../jpgraph2.orig/files/patch-src_jpgraph.php	1970-01-01 01:00:00.000000000 +0100
>+++ ./files/patch-src_jpgraph.php	2016-02-07 15:28:45.502812000 +0000
>@@ -0,0 +1,30 @@
>+--- src/jpgraph.php.orig	2016-02-07 15:28:23 UTC
>++++ src/jpgraph.php
>+@@ -1286,11 +1286,11 @@ class Graph {
>+         while( list($key,$value) = each($_GET) ) {
>+             if( is_array($value) ) {
>+                 foreach ( $value as $k => $v ) {
>+-                    $urlarg .= '&amp;'.$key.'%5B'.$k.'%5D='.urlencode($v);
>++                    $urlarg .= '&amp;'.urlencode($key).'%5B'.urlencode($k).'%5D='.urlencode($v);
>+                 }
>+             }
>+             else {
>+-                $urlarg .= '&amp;'.$key.'='.urlencode($value);
>++                $urlarg .= '&amp;'.urlencode($key).'='.urlencode($value);
>+             }
>+         }
>+ 
>+@@ -1301,11 +1301,11 @@ class Graph {
>+         while( list($key,$value) = each($_POST) ) {
>+             if( is_array($value) ) {
>+                 foreach ( $value as $k => $v ) {
>+-                    $urlarg .= '&amp;'.$key.'%5B'.$k.'%5D='.urlencode($v);
>++                    $urlarg .= '&amp;'.urlencode($key).'%5B'.urlencode($k).'%5D='.urlencode($v);
>+                 }
>+             }
>+             else {
>+-                $urlarg .= '&amp;'.$key.'='.urlencode($value);
>++                $urlarg .= '&amp;'.urlencode($key).'='.urlencode($value);
>+             }
>+         }
>+ 
>====> Cleaning up
>===> Done

Flags:

rakuco: maintainer-approval+

Actions: View | Diff

Attachments on bug 207001: 166710