diff options
| -rw-r--r-- | ext/session/session.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/ext/session/session.c b/ext/session/session.c index b6754d5df6..46a35a7a9e 100644 --- a/ext/session/session.c +++ b/ext/session/session.c @@ -153,6 +153,10 @@ static PHP_INI_MH(OnUpdateSaveDir) if (stage == PHP_INI_STAGE_RUNTIME) { char *p; + if (memchr(new_value, '\0', new_value_length) != NULL) { + return FAILURE; + } + if ((p = zend_memrchr(new_value, ';', new_value_length))) { p++; } else { |