diff options
| author | Christoph M. Becker <cmbecker69@gmx.de> | 2020-12-23 13:53:19 +0100 |
|---|---|---|
| committer | Christoph M. Becker <cmbecker69@gmx.de> | 2020-12-23 13:53:19 +0100 |
| commit | 89d4b6b790472ca4081f61b8e6fbbea170ea00ad (patch) | |
| tree | 12ba9e7f241c94e947667a52e50122556de5de1d /main | |
| parent | 438b025a28cda2935613af412fc13702883dd3a2 (diff) | |
| parent | 7d9ddd61ecc2c99be8709cfa6b51e716343ad5da (diff) | |
| download | php-git-89d4b6b790472ca4081f61b8e6fbbea170ea00ad.tar.gz | |
Merge branch 'PHP-8.0'
* PHP-8.0:
Fix #80384: limit read buffer size
Diffstat (limited to 'main')
| -rw-r--r-- | main/streams/streams.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/main/streams/streams.c b/main/streams/streams.c index 0524bd28a2..86522afa84 100644 --- a/main/streams/streams.c +++ b/main/streams/streams.c @@ -540,6 +540,7 @@ PHPAPI int _php_stream_fill_read_buffer(php_stream *stream, size_t size) /* allocate/fill the buffer */ if (stream->readfilters.head) { + size_t to_read_now = MIN(size, stream->chunk_size); char *chunk_buf; php_stream_bucket_brigade brig_in = { NULL, NULL }, brig_out = { NULL, NULL }; php_stream_bucket_brigade *brig_inp = &brig_in, *brig_outp = &brig_out, *brig_swap; @@ -547,7 +548,7 @@ PHPAPI int _php_stream_fill_read_buffer(php_stream *stream, size_t size) /* allocate a buffer for reading chunks */ chunk_buf = emalloc(stream->chunk_size); - while (!stream->eof && (stream->writepos - stream->readpos < (zend_off_t)size)) { + while (!stream->eof && (stream->writepos - stream->readpos < (zend_off_t)to_read_now)) { ssize_t justread = 0; int flags; php_stream_bucket *bucket; |