@- Fixed possible buffer-overflow in base64_decode. (Thies)

fix #3226

diff --git a/ext/standard/base64.c b/ext/standard/base64.c
index 521ccccbf9ad9b8211d262541e8e7666e983484f..0e0192ca16f8fe6c156041cb84216749e38ac9e2 100644 (file)
--- a/ext/standard/base64.c
+++ b/ext/standard/base64.c
@@ -88,7 +88,7 @@ unsigned char *php_base64_decode(const unsigned char *string, int length, int *r
                }
        }
 
-       result = (unsigned char *)emalloc((length / 4 * 3 + 1) * sizeof(char));
+       result = (unsigned char *)emalloc(length + 1);
        if (result == NULL) {
                return NULL;
        }