From 761c62267f6099af9c43a68af6156030a6c7a1af Mon Sep 17 00:00:00 2001 From: Pierre Joye Date: Tue, 30 Nov 2010 11:04:06 +0000 Subject: Fixed crash in zip extract method (possible CWE-170) --- ext/zip/php_zip.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'ext/zip/php_zip.c') diff --git a/ext/zip/php_zip.c b/ext/zip/php_zip.c index 5c291381c5..1b42c94457 100644 --- a/ext/zip/php_zip.c +++ b/ext/zip/php_zip.c @@ -162,6 +162,9 @@ static int php_zip_extract_file(struct zip * za, char *dest, char *file, int fil */ virtual_file_ex(&new_state, file, NULL, CWD_EXPAND); path_cleaned = php_zip_make_relative_path(new_state.cwd, new_state.cwd_length); + if(!path_cleaned) { + return 0; + } path_cleaned_len = strlen(path_cleaned); if (path_cleaned_len >= MAXPATHLEN || zip_stat(za, file, 0, &sb) != 0) { -- cgit v1.2.1