com php-src: add range check to ext/soap: ext/soap/soap.c
| From: | Anatol Belski | Date: | Wed, 26 Aug 2015 14:39:54 +0000 |
| Subject: | com php-src: add range check to ext/soap: ext/soap/soap.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-88758@lists.php.net to get a copy of this message | ||
Commit: 150dead2d93435b7d097981dad484ad9a42df901
Author: Anatol Belski <ab@php.net> Wed, 26 Aug 2015 14:18:42 +0200
Parents: 1553ce2093bb959f926cc43a8bf6c3c36d5b0223
Branches: master
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=150dead2d93435b7d097981dad484ad9a42df901
Log:
add range check to ext/soap
Changed paths:
M ext/soap/soap.c
Diff:
diff --git a/ext/soap/soap.c b/ext/soap/soap.c
index 0216de3..3c4a86c 100644
--- a/ext/soap/soap.c
+++ b/ext/soap/soap.c
@@ -1539,6 +1539,11 @@ PHP_METHOD(SoapServer, handle)
return;
}
+ if (ZEND_NUM_ARGS() > 0 && ZEND_SIZE_T_INT_OVFL(arg_len)) {
+ soap_server_fault("Server", "Input string is too long", NULL, NULL, NULL);
+ return;
+ }
+
if (SG(request_info).request_method &&
strcmp(SG(request_info).request_method, "GET") == 0 &&
SG(request_info).query_string &&