fix #41516 (fgets() returns a line of text when length parameter is <= 0)

diff --git a/ext/standard/file.c b/ext/standard/file.c
index 1f81380c292059761b1c5304890572a5a00d9013..89896dd7bca3b2b69d360da38744d41c6f6471e0 100644 (file)
--- a/ext/standard/file.c
+++ b/ext/standard/file.c
@@ -1138,6 +1138,11 @@ PHPAPI PHP_FUNCTION(fgets)
                RETURN_NULL();
        }
 
+       if (length <= 0) {
+               php_error_docref(NULL TSRMLS_CC, E_WARNING, "Length parameter must be greater than 0");
+               RETURN_FALSE;
+       }
+
        if (length == 1) {
                /* For BC reasons, fgets() should only return length-1 bytes. */
                RETURN_FALSE;