[php-src] PR #25457: ext/date: Fix truncated timezone name for UTC offsets of 100 hours or more
| From: | jorgsowa | Date: | Sat, 14 Nov 2026 14:02:20 +0000 |
| Subject: | [php-src] PR #25457: ext/date: Fix truncated timezone name for UTC offsets of 100 hours or more | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-40643@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/25457
Author: jorgsowa
DateTime::createFromFormat() accepts offsets like +9999, whose name does not fit the
fixed-size buffer: snprintf() truncated it, and the returned length overran the allocation, so the
string was missing its terminating NUL. GH-9763 only rejected such offsets in the
DateTimeZone constructor.
It's not really the correct offset, but it should be fixed in timelib. This is fix only for PHP
side.