[PATCH] str_pad allows pad_length to be negative

php.internals

Mattias Bengtsson

19 years ago
As stated in the manual for str_pad() "If the value of pad_length is negative or less than the length of the input string, no padding takes place.". By using a very low negative value it is possible to bypass the check. Please see attachment. Cheers, Mattias Bengtsson

Jani Taskinen

19 years ago
Patch applied to both PHP_5_2 and HEAD. Thanks! --Jani On Sat, 2007-07-21 at 21:57 +0200, Mattias Bengtsson wrote: