cvs: /php3 ChangeLog /php3/functions iptc.c

thies Wed Dec 22 09:43:44 1999 EDT Modified files: /php3 ChangeLog /php3/functions iptc.c Log: fixed buffer overruns Index: php3/ChangeLog diff -u php3/ChangeLog:1.801 php3/ChangeLog:1.802 --- php3/ChangeLog:1.801 Wed Dec 8 09:09:22 1999 +++ php3/ChangeLog Wed Dec 22 09:43:42 1999 @@ -2,6 +2,7 @@ ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| xx xx xxxx, Version 3.0.13 +- Fixed buffer overruns in iptcembed(). (Thies) - OCI8 now returns NULL values in LONG columns correct. (Thies) - Check for broken apxs (Rasmus) - explode() is now binary-safe. (Thies) Index: php3/functions/iptc.c diff -u php3/functions/iptc.c:1.17 php3/functions/iptc.c:1.18 --- php3/functions/iptc.c:1.17 Sun Nov 21 09:49:46 1999 +++ php3/functions/iptc.c Wed Dec 22 09:43:43 1999 @@ -27,7 +27,7 @@ +----------------------------------------------------------------------+ */ -/* $Id: iptc.c,v 1.17 1999/11/21 14:49:46 eschmid Exp $ */ +/* $Id: iptc.c,v 1.18 1999/12/22 14:43:43 thies Exp $ */ /* * Functions to parse & compse IPTC data. @@ -226,7 +226,7 @@ if (spool < 2) { fstat(fileno(fp),&sb); - poi = spoolbuf = emalloc(len + 30 + sb.st_size); + poi = spoolbuf = emalloc(len + sizeof(psheader) + sb.st_size + 1024); if (! spoolbuf) { fclose(fp);