diff options
| author | Christoph M. Becker <cmbecker69@gmx.de> | 2019-03-29 11:12:09 +0100 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2019-04-29 22:08:19 -0700 |
| commit | 6c631ccfef94f93259d474682f8bfa803e163c87 (patch) | |
| tree | 1e03dc08ac9acc7f7fa48170c4fde1d4fc2230c1 /sapi/phpdbg/phpdbg_parser.c | |
| parent | 588db7cecf6cf8b351de0fecdfc7de70f54bf1b1 (diff) | |
| download | php-git-6c631ccfef94f93259d474682f8bfa803e163c87.tar.gz | |
Fix #77821: Potential heap corruption in TSendMail()
`zend_string_tolower()` returns a copy (not a duplicate) of the given
string, if it is already in lower case. In this case we must not not
`zend_string_free()` both strings. The cleanest solution is to call
` zend_string_release()` on both strings, which properly handles the
refcount.
Diffstat (limited to 'sapi/phpdbg/phpdbg_parser.c')
0 files changed, 0 insertions, 0 deletions