Fixed possible buffer overflow of php_strip_tags

diff --git a/ext/standard/string.c b/ext/standard/string.c
index 77966c9726371341a144bec4aeebf0b2e540bdcc..e21cf53f0637da775aced9dbf1a97d1b59a6a20a 100644 (file)
--- a/ext/standard/string.c
+++ b/ext/standard/string.c
@@ -3746,7 +3746,9 @@ reg_char:
                c = *(++p);
                i++;
        }       
-       *rp = '\0';
+       if (rp < rbuf + len) {
+               *rp = '\0';
+       }
        efree(buf);
        if (allow)
                efree(tbuf);