[php-src] PR #24498: ext/mbstring: fix over-read in php_mb_rfc1867_getword()
| From: | jorgsowa | Date: | Wed, 21 Oct 2026 19:13:19 +0000 |
| Subject: | [php-src] PR #24498: ext/mbstring: fix over-read in php_mb_rfc1867_getword() | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39668@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24498
Author: jorgsowa
A multibyte lead byte at the end of a multipart field name made the scan advance by the full
character width past the terminating NUL, reading out of bounds. Advance byte by byte and stop at
the terminator in both advance sites, as php_mb_rfc1867_substring_conf() already does.