php_add_var_hash() uses sizeof(id) in the calls to zend_hash_*, implying

that all bytes in the character array have been set (they are used
to compute the hash value using hashpjw).

The function assumes that sprintf's %p modifier would always prefix
the output with "0x".  On HPUX, this is not the case.  Hence, not
all bytes may be properly initialized before being read.

This has been addressed by using only initialized bytes as the key.

0 files changed, 0 insertions, 0 deletions