File php7-CVE-2026-91768.patch of Package php7

File php7-CVE-2026-91768.patch of Package php7 (Revision 732330ebc6807516a047294467bb2aed)

Currently displaying revision 732330ebc6807516a047294467bb2aed , Show latest

From dcdfcf86fcf7f42fa98dd3d000f310ebdad41965 Mon Sep 17 00:00:00 2001
From: Alexandre Daubois <alex.daubois@gmail.com>
Date: Tue, 25 Aug 2026 11:23:52 +0200
Subject: [PATCH] Fix GHSA-62xp-839h-2637: FastCGI allowed_clients compared
 only 96 bits of IPv6 addresses

---
 main/fastcgi.c                                |  2 +-
 ...a-62xp-839h-2637-ipv6-allowed-clients.phpt | 52 +++++++++++++++++++
 ...xp-839h-2637-v4mapped-allowed-clients.phpt | 52 +++++++++++++++++++
 3 files changed, 105 insertions(+), 1 deletion(-)
 create mode 100644 sapi/fpm/tests/ghsa-62xp-839h-2637-ipv6-allowed-clients.phpt
 create mode 100644 sapi/fpm/tests/ghsa-62xp-839h-2637-v4mapped-allowed-clients.phpt

Index: php-7.4.33/main/fastcgi.c
===================================================================
--- php-7.4.33.orig/main/fastcgi.c
+++ php-7.4.33/main/fastcgi.c
@@ -1343,7 +1343,7 @@ static int fcgi_is_allowed() {
 	if (client_sa.sa.sa_family == AF_INET6) {
 		for (i = 0; allowed_clients[i].sa.sa_family ; i++) {
 			if (allowed_clients[i].sa.sa_family == AF_INET6
-				&& !memcmp(&client_sa.sa_inet6.sin6_addr, &allowed_clients[i].sa_inet6.sin6_addr, 12)) {
+				&& !memcmp(&client_sa.sa_inet6.sin6_addr, &allowed_clients[i].sa_inet6.sin6_addr, sizeof(client_sa.sa_inet6.sin6_addr))) {
 				return 1;
 			}
 #ifdef IN6_IS_ADDR_V4MAPPED