diff options
| author | Stanislav Malyshev <stas@php.net> | 2015-09-28 11:31:14 -0700 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2015-09-28 11:31:14 -0700 |
| commit | 629e4da7cc8b174acdeab84969cbfc606a019b31 (patch) | |
| tree | 6056369fc7909ec4aebff2e3bffa222b4bcf5355 | |
| parent | 59de2c037c4c946fc43478edc154d89dda95873d (diff) | |
| download | php-git-629e4da7cc8b174acdeab84969cbfc606a019b31.tar.gz | |
Fix bug #70480 (php_url_parse_ex() buffer overflow read)
| -rw-r--r-- | ext/standard/url.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/standard/url.c b/ext/standard/url.c index 2f56d3186d..28ccba0c81 100644 --- a/ext/standard/url.c +++ b/ext/standard/url.c @@ -320,7 +320,7 @@ PHPAPI php_url *php_url_parse_ex(char const *str, int length) nohost: if ((p = memchr(s, '?', (ue - s)))) { - pp = strchr(s, '#'); + pp = memchr(s, '#', (ue - s)); if (pp && pp < p) { if (pp - s) { |