diff options
| author | Christoph M. Becker <cmbecker69@gmx.de> | 2019-10-04 09:14:36 +0200 |
|---|---|---|
| committer | Christoph M. Becker <cmbecker69@gmx.de> | 2019-10-04 09:14:36 +0200 |
| commit | 0edcd105f31d0e93d8b68858bda508ee592bc885 (patch) | |
| tree | 27b54b76e9348c4ed7325877cebeb53664ebba6a /Zend/zend_alloc.c | |
| parent | 3f069b19a06ff913da738a699353eab80de2735c (diff) | |
| parent | 6627f782d66173a1412e6a9f721fe99f91cd9a0a (diff) | |
| download | php-git-0edcd105f31d0e93d8b68858bda508ee592bc885.tar.gz | |
Merge branch 'PHP-7.4'
* PHP-7.4:
Fix #78620: Out of memory error
Diffstat (limited to 'Zend/zend_alloc.c')
| -rw-r--r-- | Zend/zend_alloc.c | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/Zend/zend_alloc.c b/Zend/zend_alloc.c index d3349fe395..21ccf85049 100644 --- a/Zend/zend_alloc.c +++ b/Zend/zend_alloc.c @@ -1754,12 +1754,17 @@ static void *zend_mm_alloc_huge(zend_mm_heap *heap, size_t size ZEND_FILE_LINE_D * We allocate them with 2MB size granularity, to avoid many * reallocations when they are extended by small pieces */ - size_t new_size = ZEND_MM_ALIGNED_SIZE_EX(size, MAX(REAL_PAGE_SIZE, ZEND_MM_CHUNK_SIZE)); + size_t alignment = MAX(REAL_PAGE_SIZE, ZEND_MM_CHUNK_SIZE); #else - size_t new_size = ZEND_MM_ALIGNED_SIZE_EX(size, REAL_PAGE_SIZE); + size_t alignment = REAL_PAGE_SIZE; #endif + size_t new_size = ZEND_MM_ALIGNED_SIZE_EX(size, alignment); void *ptr; + if (UNEXPECTED(new_size < size)) { + zend_error_noreturn(E_ERROR, "Possible integer overflow in memory allocation (%zu + %zu)", size, alignment); + } + #if ZEND_MM_LIMIT if (UNEXPECTED(new_size > heap->limit - heap->real_size)) { if (zend_mm_gc(heap) && new_size <= heap->limit - heap->real_size) { |