com php-src: Fixed bug #73418 Integer Overflow in "_php_i map_mail" leads to crash: ext/imap/php_imap.c
| From: | Anatol Belski | Date: | Thu, 03 Nov 2016 16:03:23 +0000 |
| Subject: | com php-src: Fixed bug #73418 Integer Overflow in "_php_i map_mail" leads to crash: ext/imap/php_imap.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-95431@lists.php.net to get a copy of this message | ||
Commit: 99b242a6d093bca1f64084866b4491061de57553
Author: Anatol Belski <ab@php.net> Thu, 3 Nov 2016 17:03:23 +0100
Parents: 863d37ea66d5c960db08d6f4a2cbd2518f0f80d1
Branches: PHP-5.6 PHP-7.0 PHP-7.1 master
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=99b242a6d093bca1f64084866b4491061de57553
Log:
Fixed bug #73418 Integer Overflow in "_php_imap_mail" leads to crash
Bugs:
https://bugs..php.net/73418
Changed paths:
M ext/imap/php_imap.c
Diff:
diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c
index 564473b..6c392fb 100644
--- a/ext/imap/php_imap.c
+++ b/ext/imap/php_imap.c
@@ -3900,7 +3900,7 @@ int _php_imap_mail(char *to, char *subject, char *message, char *headers, char
*
char *tsm_errmsg = NULL;
ADDRESS *addr;
char *bufferTo = NULL, *bufferCc = NULL, *bufferBcc = NULL, *bufferHeader = NULL;
- int offset, bufferLen = 0;
+ size_t offset, bufferLen = 0;
size_t bt_len;
if (headers) {