[GIT-PULLS] [php-src] PR #22781: ext/soap: truncate header values containing newline characters.

[email protected] (devnexen) Fri, 17 Jul 2026 11:21:44 +0000
Newsgroups php.git-pulls
Message-ID <[email protected]>
Pull Request: https://github.com/php/php-src/pull/22781
Author: devnexen

Commit 3dcdb9826be routed the user_agent option through a truncate-and-warn check, but the Content-Type context option, the soapaction and the cookie names and values reach the same request buffer unchecked, so a CR/LF in any of them still injects arbitrary request headers.

Emit all of them through that same check. The helper now takes an explicit length so the char* soapaction can share it.