From owner-freebsd-ports-bugs@FreeBSD.ORG Mon Jan 23 13:20:08 2006 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 416E216A41F for ; Mon, 23 Jan 2006 13:20:08 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2411143D4C for ; Mon, 23 Jan 2006 13:20:07 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k0NDK6q1098400 for ; Mon, 23 Jan 2006 13:20:06 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k0NDK6jb098399; Mon, 23 Jan 2006 13:20:06 GMT (envelope-from gnats) Resent-Date: Mon, 23 Jan 2006 13:20:06 GMT Resent-Message-Id: <200601231320.k0NDK6jb098399@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Alexander Zhuravlev Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 851B116A426 for ; Mon, 23 Jan 2006 13:14:22 +0000 (GMT) (envelope-from zaa@ulstu.ru) Received: from kernel.ulstu.ru (kernel.ulstu.ru [62.76.34.36]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9DA184490A for ; Mon, 23 Jan 2006 12:47:51 +0000 (GMT) (envelope-from zaa@ulstu.ru) Received: from localhost (localhost [127.0.0.1]) by kernel.ulstu.ru (ulstuMail) with ESMTP id 3A4FC4AC21; Mon, 23 Jan 2006 15:47:41 +0300 (MSK) Received: from kernel.ulstu.ru ([127.0.0.1]) by localhost (kernel.ulstu.ru [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 57809-03; Mon, 23 Jan 2006 15:47:38 +0300 (MSK) Received: from wave.zaa.local (zaa.ulstu.ru [62.76.34.17]) by kernel.ulstu.ru (ulstuMail) with ESMTP id 9B70A4AC1B; Mon, 23 Jan 2006 15:47:37 +0300 (MSK) Received: by wave.zaa.local (Postfix, from userid 3909) id 167FFB83A; Mon, 23 Jan 2006 15:48:16 +0300 (MSK) Message-Id: <20060123124816.167FFB83A@wave.zaa.local> Date: Mon, 23 Jan 2006 15:48:16 +0300 (MSK) From: Alexander Zhuravlev To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: zaa@ulstu.ru Subject: ports/92198: [NEW PORT] security/pecl-filter PHP extension for safely dealing with input parameters X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Alexander Zhuravlev List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Jan 2006 13:20:08 -0000 >Number: 92198 >Category: ports >Synopsis: [NEW PORT] security/pecl-filter PHP extension for safely dealing with input parameters >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Mon Jan 23 13:20:01 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Alexander Zhuravlev >Release: FreeBSD 6.0-STABLE i386 >Organization: >Environment: System: FreeBSD wave.zaa.local 6.0-STABLE FreeBSD 6.0-STABLE #14: Wed Jan 18 23:53:14 MSK 2006 root@wave.zaa.local:/usr/obj/usr/src/sys/WAVE i386 >Description: The patch provided below contains PHP PECL extension for safely dealing with input parameters (pecl-filter) >How-To-Repeat: >Fix: --- pecl-filter.shar begins here --- # This is a shell archive. Save it in a file, remove anything before # this line, and then unpack it by entering "sh file". Note, it may # create directories; files and directories will be owned by you and # have default permissions. # # This archive contains: # # pecl-filter/ # pecl-filter/pkg-descr # pecl-filter/distinfo # pecl-filter/Makefile # echo c - pecl-filter/ mkdir -p pecl-filter/ > /dev/null 2>&1 echo x - pecl-filter/pkg-descr sed 's/^X//' >pecl-filter/pkg-descr << 'END-of-pecl-filter/pkg-descr' XWe all know that you should always check input variables, but PHP does not Xoffer really good functionality for doing this in a safe way. XThe Input Filter extension is meant to address this issue by implementing Xa set of filters and mechanisms that users can use to safely access their Xinput data. X XWWW: http://pecl.php.net/package/filter END-of-pecl-filter/pkg-descr echo x - pecl-filter/distinfo sed 's/^X//' >pecl-filter/distinfo << 'END-of-pecl-filter/distinfo' XMD5 (PECL/filter-0.9.4.tgz) = bd1e15d31d89776f80e192f0828a46a8 XSHA256 (PECL/filter-0.9.4.tgz) = 8fa653b5aec6560ca93be29c70fd4956c88ff4e6c542895e9fdca9b838641793 XSIZE (PECL/filter-0.9.4.tgz) = 13586 END-of-pecl-filter/distinfo echo x - pecl-filter/Makefile sed 's/^X//' >pecl-filter/Makefile << 'END-of-pecl-filter/Makefile' X# Ports collection makefile for: pecl-filter X# Date created: 2006-01-23 X# Whom: Alexander Zhuravlev X# X# $FreeBSD$ X# X XPORTNAME= filter XDISTVERSION= 0.9.4 XCATEGORIES= security XMASTER_SITES= http://pecl.php.net/get/ XPKGNAMEPREFIX= pecl- XEXTRACT_SUFX= .tgz XDIST_SUBDIR= PECL X XMAINTAINER= zaa@zaa.pp.ru XCOMMENT= PHP extension for safely dealing with input parameters X XLIB_DEPENDS+= pcre:${PORTSDIR}/devel/pcre X XUSE_PHP= yes XUSE_PHPIZE= yes XUSE_PHPEXT= yes XPHP_MODNAME= filter X XCONFIGURE_ARGS+= --with-pcre-dir=${LOCALBASE} X X.include END-of-pecl-filter/Makefile exit --- pecl-filter.shar ends here --- >Release-Note: >Audit-Trail: >Unformatted: