Fixed bug #78363

diff --git a/NEWS b/NEWS
index 4103d761885e18a953856741b0d469aaa48b6b87..f8508d2a307b196b0a75d38f04f1a39ae34f7a0a 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,9 @@ PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 ?? ??? 2019, PHP 7.2.22
 
+- Core:
+  . Fixed bug #78363 (Buffer overflow in zendparse). (Nikita)
+
 - Curl:
   . Fixed bug #77946 (Bad cURL resources returned by curl_multi_info_read()).
     (Abyr Valg)

diff --git a/Zend/zend_language_parser.y b/Zend/zend_language_parser.y
index 091d7f61e230bd16624e4473c66deea6faf164a2..7838c4a64d5e9e495fc7046fb5bf490aa9d1f6e2 100644 (file)
--- a/Zend/zend_language_parser.y
+++ b/Zend/zend_language_parser.y
@@ -1315,7 +1315,7 @@ static YYSIZE_T zend_yytnamerr(char *yyres, const char *yystr)
 
                if (LANG_SCNG(yy_text)[0] == 0 &&
                        LANG_SCNG(yy_leng) == 1 &&
-                       memcmp(yystr, "\"end of file\"", sizeof("\"end of file\"") - 1) == 0) {
+                       strcmp(yystr, "\"end of file\"") == 0) {
                        if (yyres) {
                                yystpcpy(yyres, "end of file");
                        }