From c23619f179ccb6c3dfdfdf3991a16ca8e2d5bf31 Mon Sep 17 00:00:00 2001 From: "lpsolit%gmail.com" <> Date: Mon, 9 Feb 2009 19:18:59 +0000 Subject: Bug 477513: md5_hex() fails if a saved search has UTF8 characters in it - Patch by Frédéric Buclin r=mkanat a=LpSolit MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- Bugzilla/Token.pm | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'Bugzilla/Token.pm') diff --git a/Bugzilla/Token.pm b/Bugzilla/Token.pm index f87490db1..4aee0561e 100644 --- a/Bugzilla/Token.pm +++ b/Bugzilla/Token.pm @@ -180,7 +180,13 @@ sub issue_hash_token { # The concatenated string is of the form # token creation time + site-wide secret + user ID + data my @args = ($time, Bugzilla->localconfig->{'site_wide_secret'}, Bugzilla->user->id, @$data); - my $token = md5_hex(join('*', @args)); + + my $token = join('*', @args); + # Wide characters cause md5_hex() to die. + if (Bugzilla->params->{'utf8'}) { + utf8::encode($token) if utf8::is_utf8($token); + } + $token = md5_hex($token); # Prepend the token creation time, unencrypted, so that the token # lifetime can be validated. -- cgit v1.2.3-24-g4f1b