Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:72696 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 39104 invoked from network); 20 Feb 2014 01:40:34 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 20 Feb 2014 01:40:34 -0000 Authentication-Results: pb1.pair.com header.from=tjerk.meesters@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=tjerk.meesters@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.128.178 as permitted sender) X-PHP-List-Original-Sender: tjerk.meesters@gmail.com X-Host-Fingerprint: 209.85.128.178 mail-ve0-f178.google.com Received: from [209.85.128.178] ([209.85.128.178:55204] helo=mail-ve0-f178.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id AB/F9-13936-01D55035 for ; Wed, 19 Feb 2014 20:40:32 -0500 Received: by mail-ve0-f178.google.com with SMTP id oy12so1244755veb.37 for ; Wed, 19 Feb 2014 17:40:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=i6mbQjDRAfmTLfuCOakjlmxA/zqnEgY9Hes3sBq/rBU=; b=MRwEfhgStLaWOklYcPmkZQVWOsfrerrV9g4cnaSyrpi8+oVJ2w95SfgPIJPtsFG7cU iuOREwI2zBDK/AZ2ItvNABiGx6Xld2xWhCV7up6/DXCk7ShBAYwoFrtb+iIhrhGu3cR+ xmBOr20A57aS/v5BnB+Vnkv3LyFrqQuGqRTDdlrOAaT5oTha+Nhl0PC9FZKH6qZy27+m tbtFP2Bend1yYkmee7kNpfhcJWQUMIgvDktpABBa1G9jStuCI+ADyaReJBj1L5cHEbnS 77wu1PS2IzEKLMznzkHUT5gkY0jVS9ir9n9MszDTOicPc0ndPkrOXlalwOpPj4BriOyF RcdA== MIME-Version: 1.0 X-Received: by 10.221.30.14 with SMTP id sa14mr3932884vcb.44.1392860429302; Wed, 19 Feb 2014 17:40:29 -0800 (PST) Received: by 10.58.133.229 with HTTP; Wed, 19 Feb 2014 17:40:29 -0800 (PST) In-Reply-To: References: Date: Thu, 20 Feb 2014 09:40:29 +0800 Message-ID: To: Ferenc Kovacs Cc: PHP Internals Content-Type: multipart/alternative; boundary=001a11336a2e1c40a904f2cc971a Subject: Re: [PHP-DEV] Re: private bug reports From: tjerk.meesters@gmail.com (Tjerk Meesters) --001a11336a2e1c40a904f2cc971a Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On Wed, Feb 19, 2014 at 8:46 AM, Ferenc Kovacs wrote: > > > > On Tue, Feb 18, 2014 at 8:43 PM, Tjerk Meesters wrote: > >> Hi, >> >> I was recently answering a question about null byte injection into PCRE >> and >> the OP claimed that a pattern such as "~.+~e\x00u" would be accepted; th= ey >> were using 5.3. >> >> The commit that fixed it was this: >> >> https://github.com/php/php-src/commit/8b3c1a380a182655113b94b0b96551e98d= 05a8d3 >> >> The corresponding (private) bug is: https://bugs.php.net/bug.php?id=3D55= 856 >> >> My question is whether there's a defined "time out period" after which >> those kind of sensitive bug reports are opened to the public; is it done >> once we hit EOL for that branch? >> >> >> -- >> -- >> Tjerk >> > > AFAIK it should be opened after we have a release with the fix announced, > as there is no point in having a reference to a private bug in the releas= e > announcement/Changelog. > Thanks. If that's indeed the case, could someone please open the bug report? :) > > -- > Ferenc Kov=E1cs > @Tyr43l - http://tyrael.hu > --=20 -- Tjerk --001a11336a2e1c40a904f2cc971a--