diff options
| author | Christoph M. Becker <cmb@php.net> | 2016-07-30 16:58:43 +0200 |
|---|---|---|
| committer | Nikita Popov <nikita.ppv@gmail.com> | 2017-07-23 12:19:27 +0200 |
| commit | 418da85f1528172fb9df376c17f0fd79faf4aebf (patch) | |
| tree | 833e3d711fbd189d457ff4a3338ab9bd484a72b7 /ext/mbstring/php_unicode.c | |
| parent | 775b4b54d81572878de5166fd717511799b92b7c (diff) | |
| download | php-git-418da85f1528172fb9df376c17f0fd79faf4aebf.tar.gz | |
Fix #71606: Segmentation fault mb_strcut with HTML-ENTITIES
The HTML decoding filter uses the `opaque` member of mbfl_convert_filter
as buffer, but there was no copy constructor defined, what caused double
frees when the filter is copied (what happens multiple times in mb_strcut(),
for instance).
Diffstat (limited to 'ext/mbstring/php_unicode.c')
0 files changed, 0 insertions, 0 deletions