com php-src: Fixed bug #73418 Integer Overflow in "_php_i map_mail" leads to crash: ext/imap/php_imap.c

Commit: b823b14e374251ad6ab437a9631e4b010ca09b68 Author: Anatol Belski <ab@php.net> Thu, 3 Nov 2016 17:03:23 +0100 Committer: Ferenc Kovacs <tyra3l@gmail.com> Wed, 9 Nov 2016 01:46:49 +0100 Parents: 7c27d0329f730d701d18e66db7e85ef7d128712b Branches: PHP-5.6.28 Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=b823b14e374251ad6ab437a9631e4b010ca09b68 Log: Fixed bug #73418 Integer Overflow in "_php_imap_mail" leads to crash Bugs: https://bugs.php.net/73418 Changed paths: M ext/imap/php_imap.c Diff: diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c index 564473b..6c392fb 100644 --- a/ext/imap/php_imap.c +++ b/ext/imap/php_imap.c @@ -3900,7 +3900,7 @@ int _php_imap_mail(char *to, char *subject, char *message, char *headers, char * char *tsm_errmsg = NULL; ADDRESS *addr; char *bufferTo = NULL, *bufferCc = NULL, *bufferBcc = NULL, *bufferHeader = NULL; - int offset, bufferLen = 0; + size_t offset, bufferLen = 0; size_t bt_len; if (headers) {