diff options
| author | Anatol Belski <ab@php.net> | 2014-09-19 20:12:24 +0200 |
|---|---|---|
| committer | Anatol Belski <ab@php.net> | 2014-09-19 20:12:24 +0200 |
| commit | 5d9403f56c14fefafa558b7de45f132a4d3f5fde (patch) | |
| tree | a16746b253a5dae6406910019bf0e96c8919104c /ext/json/php_json.h | |
| parent | b8470e19e47bbab40c30d20f231ddd694c0ca669 (diff) | |
| download | php-git-5d9403f56c14fefafa558b7de45f132a4d3f5fde.tar.gz | |
fix possible array underflow
there are multiple issues with this code
- php_stream_read() returns an unsigned val, so is >= 0
- if it read less than sizeof(a) bytes, the function operates on garbage
- result->channels is an unsigned val, so >= 0
Diffstat (limited to 'ext/json/php_json.h')
0 files changed, 0 insertions, 0 deletions