[php-src] PR #25134: openssl: Fix heap buffer overflow in TLS PSK callbacks
| From: | bukka | Date: | Sun, 01 Nov 2026 18:05:32 +0000 |
| Subject: | [php-src] PR #25134: openssl: Fix heap buffer overflow in TLS PSK callbacks | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-40196@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/25134
Author: bukka
The PSK callbacks copied the user-returned identity and key into fixed-size buffers without checking
their length. The constructor of Openssl\Psk enforces the limits, but unserialize() bypasses it, so
an oversized string overflowed the buffer. Bound each length to its buffer before copying.