summaryrefslogtreecommitdiff
path: root/ext/xml
diff options
context:
space:
mode:
authorStanislav Malyshev <stas@php.net>2016-03-01 23:11:42 -0800
committerStanislav Malyshev <stas@php.net>2016-03-01 23:11:42 -0800
commit2e874114a235e3ecabe044d2b8768e693f3cec5a (patch)
treef4385e73070350c26feaac314bcd297cceffebbd /ext/xml
parent289e492251bcdafcd56439b758bc991a8d333b13 (diff)
parent6823ee923de6e9cbd6ced8e3f87fc83a2c3bc444 (diff)
downloadphp-git-2e874114a235e3ecabe044d2b8768e693f3cec5a.tar.gz
Merge branch 'PHP-7.0'
* PHP-7.0: (25 commits) Update NEWS update NEWS fix test file Fix version update NEWS Update NEWS Fix bug #71610: Type Confusion Vulnerability - SOAP / make_http_soap_request() Fix bug #71637: Multiple Heap Overflow due to integer overflows extend check for add_flag Fixed another segfault with file_cache_only now set version fix nmake clean in phpize mode Fixed segfault with file_cache_only Fixed possible crash at PCRE on MSHUTDOWN Fixed more synchronisation issues during SHM reload Set proper type flags (REFCOUNTED and COPYABLE) according to interned or regular string sync with improvements in NEWS Fixed process synchronisation problem, that may cause crashes after opcache restart Fix bug #71610: Type Confusion Vulnerability - SOAP / make_http_soap_request() Fix bug #71637: Multiple Heap Overflow due to integer overflows ...
Diffstat (limited to 'ext/xml')
-rw-r--r--ext/xml/xml.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/xml/xml.c b/ext/xml/xml.c
index b832732f0d..49b72a0acc 100644
--- a/ext/xml/xml.c
+++ b/ext/xml/xml.c
@@ -581,7 +581,7 @@ PHP_XML_API zend_string *xml_utf8_encode(const char *s, size_t len, const XML_Ch
}
/* This is the theoretical max (will never get beyond len * 2 as long
* as we are converting from single-byte characters, though) */
- str = zend_string_alloc(len * 4, 0);
+ str = zend_string_safe_alloc(len, 4, 0, 0);
ZSTR_LEN(str) = 0;
while (pos > 0) {
c = encoder ? encoder((unsigned char)(*s)) : (unsigned short)(*s);