[GIT-PULLS] [php-src] PR #23213: ext/curl: apply open_basedir restriction to CURLOPT_SSLENGINE
[email protected] (Sjord)
| Newsgroups | php.git-pulls |
|---|---|
| Message-ID | <[email protected]> |
Pull Request: https://github.com/php/php-src/pull/23213 Author: Sjord CURLOPT_SSLENGINE normally takes an engine name, but in some cases the passed string is loaded as a shared library. Validate it against open_basedir to restrict the locations the shared library can be loaded from. Related to https://github.com/php/php-src/issues/22035, but does not solve it.