]> granicus.if.org Git - php/commitdiff
Limit connection strings to 255 chars here
authorRasmus Lerdorf <rasmus@php.net>
Wed, 15 Jul 2009 19:05:09 +0000 (19:05 +0000)
committerRasmus Lerdorf <rasmus@php.net>
Wed, 15 Jul 2009 19:05:09 +0000 (19:05 +0000)
ext/mssql/php_mssql.c

index 02bfc9543c1e33e002e3401165ff9620fb86220e..c2702d197c9b4349882d4a03d1f6ab2d233fd152 100644 (file)
@@ -550,6 +550,17 @@ static void php_mssql_do_connect(INTERNAL_FUNCTION_PARAMETERS, int persistent)
                return;
        }
 
+       /* Limit strings to 255 chars to prevent overflow issues in underlying libraries */
+       if(host_len>255) {
+               host[255] = '\0';
+       } 
+       if(user_len>255) {
+               user[255] = '\0';
+       } 
+       if(passwd_len>255) {
+               passwd[255] = '\0';
+       } 
+
        switch(ZEND_NUM_ARGS())
        {
                case 0: