MFH: fix segfault in imap_sort()

diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c
index acd71be78dae6813c6596cdc98177b5ec790b74b..6259f632eeb8e1e48e73ac849df1196a282e573d 100644 (file)
--- a/ext/imap/php_imap.c
+++ b/ext/imap/php_imap.c
@@ -2434,8 +2434,13 @@ PHP_FUNCTION(imap_sort)
        }
        if (myargc >= 4) {
                convert_to_long_ex(flags);
+               if (Z_LVAL_PP(flags) < 0) {
+                       php_error_docref(NULL TSRMLS_CC, E_WARNING, "Search options parameter has to be greater than or equal to 0cannot be less than 0");
+                       RETURN_FALSE;
+               }
        }
        if (myargc >= 5) {
+               convert_to_string_ex(criteria);
                search_criteria = estrndup(Z_STRVAL_PP(criteria), Z_STRLEN_PP(criteria));
                spg = mail_criteria(search_criteria);
                efree(search_criteria);