Skip to content

Fix GH-24640: tcadb handler allows injecting Tokyo Cabinet parameters via "#" - #24656

Open
lazerg wants to merge 1 commit into
php:PHP-8.4from
lazerg:fix/gh-24640-tcadb-path
Open

lazerg wants to merge 1 commit into
php:PHP-8.4from
lazerg:fix/gh-24640-tcadb-path

Conversation

@lazerg

@lazerg lazerg commented Oct 24, 2026

Copy link
Copy Markdown
Contributor

tcadbopen() splits its name on # and treats everything after the first one as tuning parameters, so a dba_open() path containing # opened a different file than the one PHP's lock layer used, with extra parameters like bnum applied. Tokyo Cabinet has no way to escape #, so the tcadb handler now rejects such paths.

Fixes #24640

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant