diff options
| author | Stefan Esser <sesser@php.net> | 2001-12-16 14:47:18 +0000 |
|---|---|---|
| committer | Stefan Esser <sesser@php.net> | 2001-12-16 14:47:18 +0000 |
| commit | b29bcc861833fe7aa16abea5b43cc54048004c23 (patch) | |
| tree | 64fd06fee060b3b28e1adeeeb5c9042389aeaee3 /main | |
| parent | dce6ba9e0ff0d0d1af9360fbe12bfaf2682e74fd (diff) | |
| download | php-git-b29bcc861833fe7aa16abea5b43cc54048004c23.tar.gz | |
fixed: bufferoverflow in sapi_add_header_ex triggerable by header("WWW-Authenticate: Basic foobar");
Diffstat (limited to 'main')
| -rw-r--r-- | main/SAPI.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/main/SAPI.c b/main/SAPI.c index 7b226f112b..396927685e 100644 --- a/main/SAPI.c +++ b/main/SAPI.c @@ -504,6 +504,7 @@ SAPI_API int sapi_add_header_ex(char *header_line, uint header_line_len, zend_bo efree(result); conv_len = sprintf(conv_temp," realm=\"%ld\"",myuid); result = emalloc(ptr_len+conv_len+1); + result_len = ptr_len+conv_len; memcpy(result, ptr, ptr_len); memcpy(result+ptr_len, conv_temp, conv_len); *(result+ptr_len+conv_len) = '\0'; |