Fixed a problem in the configuration scanner where two extra NULL bytes

were added to each encapsulated string.

NEWS

@@ -2,6 +2,8 @@ PHP 4.0                                                                    NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 
 11 Oct 2000, Version 4.0.3
+- Fixed a problem in the configuration parser (two null bytes were added
+  to each ENCAPSULATED TC_STRING) (alex@zend.com)
 - Fixed a possible crash in -a interactive mode (Zeev, Zend Engine)
 - Added mysql_escape_string() (Peter A. Savitch and & Brian Wang)
 - Fixed many possible crash bugs with improper use of the printf() family of

main/configuration-scanner.l

@@ -113,8 +113,8 @@ void init_cfg_scanner()
 	/* eat leading " */
 	yytext++;
 
-	cfglval->value.str.val = zend_strndup(yytext,yyleng);
-	cfglval->value.str.len = yyleng;
+	cfglval->value.str.val = zend_strndup(yytext, yyleng - 2);
+	cfglval->value.str.len = yyleng - 2;
 	cfglval->type = IS_STRING;
 	return TC_ENCAPSULATED_STRING;
 }