Fix bug #72771: ftps:// opendir wrapper is vulnerable to protocol dow…

…ngrade attack
php · Aug 17, 2016 · e018ff0 · e018ff0
1 parent 639f7fd
commit e018ff0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/ext/standard/ftp_fopen_wrapper.c b/ext/standard/ftp_fopen_wrapper.c
@@ -188,7 +188,8 @@ static php_stream *php_ftp_fopen_connect(php_stream_wrapper *wrapper, const char
 			/* get the response */
 			result = GET_FTP_RESULT(stream);
 			if (result != 334) {
-				use_ssl = 0;
+				php_stream_wrapper_log_error(wrapper, options TSRMLS_CC, "Server doesn't support FTPS.");
+				goto connect_errexit;
 			} else {
 				/* we must reuse the old SSL session id */
 				/* if we talk to an old ftpd-ssl */