diff options
| author | Christoph M. Becker <cmbecker69@gmx.de> | 2016-09-06 12:05:22 +0200 |
|---|---|---|
| committer | Christoph M. Becker <cmbecker69@gmx.de> | 2016-09-06 12:05:58 +0200 |
| commit | dad793630d5966a9c22f3fcd7f24b7937bd1a36f (patch) | |
| tree | 23f86bbecf4a3ee50d9e946165750376990e8824 /ext/mysqlnd/mysqlnd_protocol_frame_codec.c | |
| parent | 3a35d43ad9000d1a573d08784aead356e2ae3535 (diff) | |
| download | php-git-dad793630d5966a9c22f3fcd7f24b7937bd1a36f.tar.gz | |
Fix #73025: Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c
`command_length` is retrieved via strlen() and later passed to emalloc()
and memcpy(), so the appropriate type is `size_t`.
We don't add a regression test, because that would need to allocate a string
of at least 2 GiB.
Diffstat (limited to 'ext/mysqlnd/mysqlnd_protocol_frame_codec.c')
0 files changed, 0 insertions, 0 deletions