MFB: Fixed bug #46731 (Missing validation for the options parameter of the

  imap_fetch_overview() function).

diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c
index 67d0fedf042a0612eab938a39df2748836c4b3cf..b43a8bb2e6edf03421b61608e7acbb485807ae3e 100644 (file)
--- a/ext/imap/php_imap.c
+++ b/ext/imap/php_imap.c
@@ -3159,11 +3159,16 @@ PHP_FUNCTION(imap_fetch_overview)
                return;
        }
 
+       if (flags && !(flags & FT_UID)) {
+               php_error_docref(NULL TSRMLS_CC, E_WARNING, "invalid value for the options parameter");
+               RETURN_FALSE;
+       }
+
        ZEND_FETCH_RESOURCE(imap_le_struct, pils *, &streamind, -1, "imap", le_imap);
 
        array_init(return_value);
-       
-       status = (flags & FT_UID) 
+
+       status = (flags & FT_UID)
                ? mail_uid_sequence(imap_le_struct->imap_stream, sequence)
                : mail_sequence(imap_le_struct->imap_stream, sequence);