session_decode should not segfault

24 years ago · 5fe046c4c3
1 changed files with 3 additions and 0 deletions
--- a/ext/session/session.c
+++ b/ext/session/session.c
@ -1428,6 +1428,9 @@ PHP_FUNCTION(session_decode)
 	if (ZEND_NUM_ARGS() != 1 || zend_get_parameters_ex(1, &str) == FAILURE)
 		WRONG_PARAM_COUNT;

+	if (PS(session_status) == php_session_none)
+		RETURN_FALSE;
+
 	convert_to_string_ex(str);

 	php_session_decode(Z_STRVAL_PP(str), Z_STRLEN_PP(str) TSRMLS_CC);