[php-maint] Bug#615025: Bug#615025: php5: PHP #52534 - var_export array with negative key

[Ondřej Surý]

severity 615025 normal
fixed 615025 5.3.5-1
thank you

Hi Jim,

this bug was fixed in new upstream version. Unfortunately I don't
think the bug severity it warrants an update to stable since it's not
a security vulnerability.

However Raphael could think otherwise and we may include the fix in
some .point release of squeeze.

Regards,
Ondrej

On Fri, Feb 25, 2011 at 01:13, Jim Salter <debianbugs at jrs-s.net> wrote:
> Package: php5
> Version: 5.3.3-7
> Severity: important
> Tags: upstream
>
>
> http://bugs.php.net/52534
>
> [2010-08-04 16:31 UTC] atila dot szekely at gmail dot com
> Description:
> ------------
> var_export is exporting negative array key as maxint (64 bit). Example: -1 will be replaced with 18446744073709551615
>
> Test script:
> ---------------
> $aArray = array ( -1 => 'Hello', 1  => 'World');
>
> $sExported = var_export($aArray,true);
>
> echo $sExported;
>
>
> Expected result:
> ----------------
> array ( -1 => 'Hello',1 => 'World')
>
> Actual result:
> --------------
> array ( 18446744073709551615 => 'Hello', 1 => 'World' )
>
>
> Confirmed to exist against PHP 5.3.3-7 in Squeeze.  Has already been fixed in 5.3 branch and trunk upstream.
>
>
> -- System Information:
> Debian Release: 6.0
>  APT prefers stable
>  APT policy: (500, 'stable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 2.6.26-2-amd64 (SMP w/8 CPU cores)
> Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
> Shell: /bin/sh linked to /bin/dash
>
> Versions of packages php5 depends on:
> ii  libapache2-mod-php5           5.3.3-7    server-side, HTML-embedded scripti
> ii  php5-common                   5.3.3-7    Common files for packages built fr
>
> php5 recommends no packages.
>
> php5 suggests no packages.
>
> -- no debconf information
>
>
>
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint at lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/pkg-php-maint
>



-- 
Ondřej Surý <ondrej at sury.org>
http://blog.rfc1925.org/