com php-src: Fix bug #70480 (php_url_parse_ex() b uffer overflow read): ext/standard/url.c
| From: | Stanislav Malyshev | Date: | Mon, 28 Sep 2015 18:31:14 +0000 |
| Subject: | com php-src: Fix bug #70480 (php_url_parse_ex() b uffer overflow read): ext/standard/url.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-89186@lists.php.net to get a copy of this message | ||
Commit: 629e4da7cc8b174acdeab84969cbfc606a019b31
Author: Stanislav Malyshev <stas@php.net> Mon, 28 Sep 2015 11:31:14 -0700
Parents: 59de2c037c4c946fc43478edc154d89dda95873d
Branches: PHP-5.6 PHP-7.0 master
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=629e4da7cc8b174acdeab84969cbfc606a019b31
Log:
Fix bug #70480 (php_url_parse_ex() buffer overflow read)
Bugs:
https://bugs.php.net/70480
Changed paths:
M ext/standard/url.c
Diff:
diff --git a/ext/standard/url.c b/ext/standard/url.c
index 2f56d31..28ccba0 100644
--- a/ext/standard/url.c
+++ b/ext/standard/url.c
@@ -320,7 +320,7 @@ PHPAPI php_url *php_url_parse_ex(char const *str, int length)
nohost:
if ((p = memchr(s, '?', (ue - s)))) {
- pp = strchr(s, '#');
+ pp = memchr(s, '#', (ue - s));
if (pp && pp < p) {
if (pp - s) {