Re: Bug #18056 [SECURITY]: Symlink attack in PEAR install

[email protected] (Helgi Þormar Þorbjörnsson)
Newsgroups php.pear.qa
Message-ID <[email protected]> 
pear trunk is very stable as I've been committing to it for the past few weeks and I don't believe this is an issues; Brett and I took a quick look at the issue and we were confused as to how this would work anyway.

Also, sys_get_temp_dir is a PHP 5.2.1+ feature.

If you look at any of the PEAR code you may notice that we do in fact do tmp dir handling unless the person has defined their own.

- Helgi

On 7 Dec 2010, at 12:01, Daniel O'Connor wrote:

> http://pear.php.net/bugs/bug.php?id=18056
> 
> Anyone able to take a look and come up with a patch? sys_get_temp_dir() should mostly do the trick; shouldn't it?
> Anyone roughly know how stable the pear/trunk code is?
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.