[Snort-users] Fwd: php Bug #13419

chris koontz ckoontz at ...131...
Mon Sep 24 14:25:02 EDT 2001


NOTE: the following function in acid_common.php no
longer works with latest PHP... mfischer of the php
team states this is not a php bug (his response {and
the reason this function will no longer work) is
included below the function):

function GetQueryResultID($submit, &$seq, &$sid,
&$cid)
{
  strtok($submit, "#");
  $seq = strtok("-");
         strtok("(");
  $sid = strtok("-");
  $cid = strtok(")");
}

--- Bug Database <php-dev at ...3581...> wrote:
> Date: 24 Sep 2001 20:17:00 -0000
> To: ckoontz at ...131...
> Subject: Bug #13419 Updated: strtok doesn't properly
> work with "#" as a token
> From: Bug Database <php-dev at ...3581...>
> 
> ID: 13419
> Updated by: mfischer
> Reported By: ckoontz at ...131...
> Old Status: Open
> Status: Bogus
> Bug Type: Strings related
> Operating System: linux 2.4.9 (debian unstable)
> PHP Version: 4.0.6.7rc2
> New Comment:
> 
> This is not a bug. This is the way strtok() works.
> Although PHP uses its own implementation, strtok()
> under C works the same and PHP mimics the C version
> (anything else would render this function useless).
> 
> No bug, bogusifying.
> 
> If you need similar functionality take a look at
> explode()/split()
> 
> - Markus
> 
> Previous Comments:
>
------------------------------------------------------------------------
> 
> [2001-09-24 15:29:53] ckoontz at ...131...
> 
> in the following code:
> $string = "#This is an example string";
> $tok1 = strtok($string,"#");
> 
> $tok1 should equal nothing.. however it equals
> $string
> 
> This bug breaks ACID:
> http://www.cert.org/kb/acid/
> 
> people on IRC have verified that this bug is also in
> CVS as of this report
> 
>
------------------------------------------------------------------------
> 
> 
> 
> ATTENTION! Do NOT reply to this email!
> To reply, use the web interface found at
> http://bugs.php.net/?id=13419&edit=2
> 


=====
---------------ckoontz at ...132...
The above text is a natural product.  Slight variations
in spelling and grammar enhance its individual character
& beauty and in no way are to be considered flaws or defects.  
----------------------------------------------------------

__________________________________________________
Do You Yahoo!?
Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger. http://im.yahoo.com




More information about the Snort-users mailing list