diff options
Diffstat (limited to 'ext/sysvshm/sysvshm.c')
| -rw-r--r-- | ext/sysvshm/sysvshm.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/ext/sysvshm/sysvshm.c b/ext/sysvshm/sysvshm.c index 3c30dda898..a445bf27bf 100644 --- a/ext/sysvshm/sysvshm.c +++ b/ext/sysvshm/sysvshm.c @@ -408,6 +408,10 @@ static long php_check_shm_data(sysvshm_chunk_head *ptr, long key) return pos; } pos += shm_var->next; + + if (shm_var->next <= 0 || pos < ptr->start) { + return -1; + } } return -1; } |