Welcome to Centmin Mod Community
Register Now

Stable Branch harden EL7 xp_ssl shim detection guards in 132.00stable

Discussion in 'Centmin Mod Github Commits' started by eva2000, May 17, 2026.

  1. eva2000

    eva2000 Administrator Staff Member

    59,480
    12,536
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,176
    Local Time:
    10:26 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    harden EL7 xp_ssl shim detection guards in 132.00stable

    Three future-fragility tightenings of the content-detection guards in
    the EL7 OpenSSL 1.0.2 xp_ssl shim block. Behavior on current upstream
    PHP source is unchanged.

    - "Already applied" check: match any static-prefixed
    ASN1_STRING_get0_data signature OR our comment fingerprint, instead
    of one exact prototype shape (survives static inline, attributes,
    reordered const).
    - php_openssl.h check: require `static` keyword on same line as the
    accessor name, so bare prototypes/comments don't false-skip while a
    real shared-header shim still does skip.
    - Regression signature: require GEN_IPADD + ASN1_STRING_get0_data both
    present, instead of hardcoding the san->d.iPAddress argument shape
    (survives any upstream variable rename of `san`).

    Changes:
    - inc/php_patch.inc (3 line edits in the EL7 xp_ssl block)


    Continue reading...

    132.00stable branch