Synced mail function in mb_send_mail function(Escape mail.force_extra_parameters...

diff --git a/ext/mbstring/mbstring.c b/ext/mbstring/mbstring.c
index cfbd79592ef0f1e64009e22616ea59d97637e22f..68dd64d20dc91f317b08f09685c529be8094d1ca 100644 (file)
--- a/ext/mbstring/mbstring.c
+++ b/ext/mbstring/mbstring.c
@@ -3785,7 +3785,7 @@ PHP_FUNCTION(mb_send_mail)
        headers = (char *)device.buffer;
 
        if (force_extra_parameters) {
-               extra_cmd = estrdup(force_extra_parameters);
+               extra_cmd = php_escape_shell_cmd(force_extra_parameters);
        } else if (extra_cmd) {
                extra_cmd = php_escape_shell_cmd(extra_cmd);
        }