[php-src] PR #23350: Bound getSingletonPos before reading the next separator
| From: | iliaal | Date: | Tue, 18 Aug 2026 11:54:19 +0000 |
| Subject: | [php-src] PR #23350: Bound getSingletonPos before reading the next separator | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-37967@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23350
Author: iliaal
getSingletonPos() read str[i+2] after the last '-' or '_' in a locale, one byte
past the NUL for strings such as en-. Require i+2 to be inside the string. Output matches the
unfixed parser unless that heap byte happens to be another separator; php/php-src#22498 closed for
that reason.