diff options
| author | Anatol Belski <ab@php.net> | 2016-11-03 17:03:23 +0100 |
|---|---|---|
| committer | Anatol Belski <ab@php.net> | 2016-11-03 17:09:03 +0100 |
| commit | de643586dee986ff16c0a6be44813687786aa781 (patch) | |
| tree | 9856bcedb539ae919d16574aaa0fdfe0679ffa63 /ext/imap/php_imap.c | |
| parent | 5693474997b5a804be307583fb7bc3cfcdd50aec (diff) | |
| download | php-git-de643586dee986ff16c0a6be44813687786aa781.tar.gz | |
Fixed bug #73418 Integer Overflow in "_php_imap_mail" leads to crash
(cherry picked from commit 99b242a6d093bca1f64084866b4491061de57553)
Diffstat (limited to 'ext/imap/php_imap.c')
| -rw-r--r-- | ext/imap/php_imap.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c index 566392fbfd..48229b5227 100644 --- a/ext/imap/php_imap.c +++ b/ext/imap/php_imap.c @@ -3934,7 +3934,7 @@ int _php_imap_mail(char *to, char *subject, char *message, char *headers, char * char *tsm_errmsg = NULL; ADDRESS *addr; char *bufferTo = NULL, *bufferCc = NULL, *bufferBcc = NULL, *bufferHeader = NULL; - int offset, bufferLen = 0; + size_t offset, bufferLen = 0; size_t bt_len; if (headers) { |