Bug #74625 [Asn->Csd]: Integer overflow in oci_bind_array_by_name
| From: | sixd@php.net | Date: | Wed, 21 Jun 2017 05:56:55 +0000 |
| Subject: | Bug #74625 [Asn->Csd]: Integer overflow in oci_bind_array_by_name | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-209610@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=74625&edit=1
ID: 74625
Updated by: sixd@php.net
Reported by: ingmar dot php at irsoft dot de
Summary: Integer overflow in oci_bind_array_by_name
-Status: Assigned
+Status: Closed
Type: Bug
Package: OCI8 related
Operating System: Any
PHP Version: 7.1.5
Assigned To: sixd
Block user comment: N
Private report: N
New Comment:
Automatic comment on behalf of ingmar.runge@sixt.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=fa3615f14ee9c0be361d8c45251f9d30cfe49900
Log: Fixed bug #74625 (Integer overflow in oci_bind_array_by_name).
Previous Comments:
------------------------------------------------------------------------
[2017-05-21 17:31:33] ingmar dot php at irsoft dot de
Description:
------------
The same problem as fixed in bug #68298 for oci_bind_by_name exists in oci_bind_array_by_name as
well. I have a tested patch and will submit it soonâ¢.
Test script:
---------------
$sql = '
BEGIN
SELECT -1 BULK COLLECT INTO :a FROM DUAL;
END;
';
$stmt = oci_parse($conn, $sql);
oci_bind_array_by_name($stmt, ':a', $a, 5000, 10, SQLT_INT);
oci_execute($stmt);
var_dump($a);
Expected result:
----------------
Array
(
[0] => -1
)
Actual result:
--------------
Array
(
[0] => 4294967295
)
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=74625&edit=1