diff options
| author | Christoph M. Becker <cmbecker69@gmx.de> | 2016-09-16 23:41:10 +0200 |
|---|---|---|
| committer | Christoph M. Becker <cmbecker69@gmx.de> | 2016-09-16 23:41:10 +0200 |
| commit | 66826730702d3ed3d6d45320ad1276977e67bb9e (patch) | |
| tree | 7eaa3e1ef517a88fb82f06bd924b20a2d8897082 /ext/session/mod_files.c | |
| parent | 01c7c6b152c4aaf91522d94933853f8bfe7e920d (diff) | |
| download | php-git-66826730702d3ed3d6d45320ad1276977e67bb9e.tar.gz | |
Fix #73100: session_destroy null dereference in ps_files_path_create
Diffstat (limited to 'ext/session/mod_files.c')
| -rw-r--r-- | ext/session/mod_files.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/session/mod_files.c b/ext/session/mod_files.c index 80eb658c11..5c69ae3334 100644 --- a/ext/session/mod_files.c +++ b/ext/session/mod_files.c @@ -79,7 +79,7 @@ static char *ps_files_path_create(char *buf, size_t buflen, ps_files *data, cons int n; key_len = strlen(key); - if (key_len <= data->dirdepth || + if (!data || key_len <= data->dirdepth || buflen < (strlen(data->basedir) + 2 * data->dirdepth + key_len + 5 + sizeof(FILE_PREFIX))) { return NULL; } |