<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>PHPDeveloper.org</title>
    <link>http://www.phpdeveloper.org</link>
    <description>Up-to-the Minute PHP News, views and community</description>
    <language>en-us</language>
    <pubDate>Fri, 09 Jan 2009 22:44:06 -0600</pubDate>
    <ttl>30</ttl>
    <item>
      <title><![CDATA[PHP Security Blog: Chunk_split() Overflow not fixed at all...]]></title>
      <guid>http://www.phpdeveloper.org/news/7971</guid>
      <link>http://www.phpdeveloper.org/news/7971</link>
      <description><![CDATA[<p>
In <a href="http://blog.php-security.org/archives/86-Chunk_split-Overflow-not-fixed-at-all....html">this new post</a> to the PHP Security blog, <i>Stefan Esser</i> points out that an issue that was previously marked as corrected - a problem with the chunk_split function - hasn't completely been corrected.
</p>
<blockquote>
This [<a href="http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.58&r2=1.445.2.14.2.59">bugfix</a>] fixes the chunk_split() overflow (found by SEC-CONSULT) that was according to the PHP 5.2.3 release notes already fixed. The <a href="http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.57&r2=1.445.2.14.2.58">original fix</a> was however not only broken but complete nonsense. If you can read C you will see that the integer overflow was not fixed in PHP 5.2.3 but simply moved into a separate line and an additional bogus if clause was added.
</blockquote>
<p>
<i>Stefan</i> includes a simple <a href="http://blog.php-security.org/archives/86-Chunk_split-Overflow-not-fixed-at-all....html">four line code example</a> to illustrate his point.
</p>]]></description>
      <pubDate>Tue, 05 Jun 2007 07:41:00 -0500</pubDate>
    </item>
  </channel>
</rss>
