summaryrefslogtreecommitdiff
path: root/ext
diff options
context:
space:
mode:
authorDmitry Stogov <dmitry@zend.com>2014-08-15 08:10:08 +0400
committerDmitry Stogov <dmitry@zend.com>2014-08-15 08:10:08 +0400
commit8b66d64b2343bc4fd8aeabb690024edb850a0155 (patch)
treebd64ff35b4d598dc7e0252347ef538709fe2c333 /ext
parent6463bc5b55f6c771d5253cbc877725b5f5cec23a (diff)
parente9dac4cf71af3af131e75bf57aba1635f10ba82e (diff)
downloadphp-git-POST_PHPNG_MERGE.tar.gz
Merge branch 'master' into phpngPOST_PHPNG_MERGE
* master: add NEWS for 5.6 too Fix bug #67716 - Segfault in cdf.c Fix bug #67716 - Segfault in cdf.c fix test split the glob() test to test different basedir fixed glob() edge case on windows, ref bug #47358 - fix bug #47358, glob returns error, should be empty array() Add NEWS entry for log() improvements
Diffstat (limited to 'ext')
-rw-r--r--ext/fileinfo/libmagic/cdf.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/fileinfo/libmagic/cdf.c b/ext/fileinfo/libmagic/cdf.c
index ad285cfe18..c86763faa0 100644
--- a/ext/fileinfo/libmagic/cdf.c
+++ b/ext/fileinfo/libmagic/cdf.c
@@ -823,7 +823,7 @@ cdf_read_property_info(const cdf_stream_t *sst, const cdf_header_t *h,
q = (const uint8_t *)(const void *)
((const char *)(const void *)p + ofs
- 2 * sizeof(uint32_t));
- if (q > e) {
+ if (q < p || q > e) {
DPRINTF(("Ran of the end %p > %p\n", q, e));
goto out;
}