- Fixed bug #53136 (Invalid read on openssl_csr_new())

diff --git a/ext/openssl/openssl.c b/ext/openssl/openssl.c
index 4427c43700c40ec47ba1dadfda93f77b61a67156..609871b7ea7a585bc8bfe31f0532de9679724f92 100644 (file)
--- a/ext/openssl/openssl.c
+++ b/ext/openssl/openssl.c
@@ -2154,7 +2154,8 @@ static int php_openssl_make_REQ(struct php_x509_request * req, X509_REQ * csr, z
                if (attribs) {
                        zend_hash_internal_pointer_reset_ex(HASH_OF(attribs), &hpos);
                        while(zend_hash_get_current_data_ex(HASH_OF(attribs), (void**)&item, &hpos) == SUCCESS) {
-                               char * strindex; uint strindexlen;
+                               char *strindex = NULL;
+                               uint strindexlen;
                                ulong intindex;
 
                                zend_hash_get_current_key_ex(HASH_OF(attribs), &strindex, &strindexlen, &intindex, 0, &hpos);