fix 64-bit integer overflow in mhash_keygen_s2k

diff --git a/ext/hash/hash.c b/ext/hash/hash.c
index 0eb0c7c95672b1265aae1323ed8b9e18c45c5143..4c1222f0017e0a85b2d0be702423335de68236d3 100644 (file)
--- a/ext/hash/hash.c
+++ b/ext/hash/hash.c
@@ -744,15 +744,17 @@ PHP_FUNCTION(mhash_get_block_size)
    Generates a key using hash functions */
 PHP_FUNCTION(mhash_keygen_s2k)
 {
-       long algorithm, bytes;
+       long algorithm, l_bytes;
+       int bytes;
        char *password, *salt;
        int password_len, salt_len;
        char padded_salt[SALT_SIZE];
 
-       if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "lssl", &algorithm, &password, &password_len, &salt, &salt_len, &bytes) == FAILURE) {
+       if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "lssl", &algorithm, &password, &password_len, &salt, &salt_len, &l_bytes) == FAILURE) {
                return;
        }
 
+       bytes = (int)l_bytes;
        if (bytes <= 0){
                php_error_docref(NULL TSRMLS_CC, E_WARNING, "the byte parameter must be greater than 0");
                RETURN_FALSE;