summaryrefslogtreecommitdiff
path: root/ext/zip/php_zip.c
diff options
context:
space:
mode:
authorNikita Popov <nikita.ppv@gmail.com>2020-08-27 15:49:33 +0200
committerNikita Popov <nikita.ppv@gmail.com>2020-08-27 15:50:49 +0200
commit62dce97973436f1830b18304e7939a03b18d44ba (patch)
tree639e43bdfeb5bc6ec605532047153ec85f8274e4 /ext/zip/php_zip.c
parent1b7ee6db884b7574893bc737a6f7fb5fdf9d619b (diff)
downloadphp-git-62dce97973436f1830b18304e7939a03b18d44ba.tar.gz
Require non-negative length in stream_get_contents()
If the length is not -1, require it to be non-negative. Using such lengths doesn't make sense (as only -1 is special-case to read in chunks, anything else will end up doing a huge upfront allocation) and can lead to string allocation overflow. A similar check is already in place for file_get_contents(). That one does not allow -1 (and uses null instead), but this function is explicitly specified to accept -1, so stick to that behavior.
Diffstat (limited to 'ext/zip/php_zip.c')
0 files changed, 0 insertions, 0 deletions