- Fixed bug #48696 (ldap_read() segfaults with invalid parameters)

diff --git a/ext/ldap/ldap.c b/ext/ldap/ldap.c
index a9037136a53f081ed72fd4b3d4c7b64e6152bb96..962c1c31d6560f6e54c03a359a0f49df87c1e493 100644 (file)
--- a/ext/ldap/ldap.c
+++ b/ext/ldap/ldap.c
@@ -600,7 +600,7 @@ static void php_ldap_do_search(INTERNAL_FUNCTION_PARAMETERS, int scope)
        char *ldap_base_dn = NULL;
        char *ldap_filter = NULL;
        char **ldap_attrs = NULL; 
-       ldap_linkdata *ld;
+       ldap_linkdata *ld = NULL;
        LDAPMessage *ldap_res;
        int ldap_attrsonly = 0;
        int ldap_sizelimit = -1; 
@@ -817,8 +817,10 @@ cleanup_parallel:
        }
 
 cleanup:
-       // Restoring previous options
-       php_set_opts(ld->link, old_ldap_sizelimit, old_ldap_timelimit, old_ldap_deref, &ldap_sizelimit, &ldap_timelimit, &ldap_deref);
+       if (ld) {
+               /* Restoring previous options */        
+               php_set_opts(ld->link, old_ldap_sizelimit, old_ldap_timelimit, old_ldap_deref, &ldap_sizelimit, &ldap_timelimit, &ldap_deref);
+       }
        if (ldap_attrs != NULL) {
                efree(ldap_attrs);
        }

diff --git a/ext/ldap/tests/bug48696.phpt b/ext/ldap/tests/bug48696.phpt
new file mode 100644 (file)
index 0000000..3cef186
--- /dev/null
+++ b/ext/ldap/tests/bug48696.phpt
@@ -0,0 +1,10 @@
+--TEST--
+Bug #48696 (ldap_read() segfaults with invalid parameters)
+--FILE--
+<?php
+
+ldap_read(1,1,1);
+
+?>
+--EXPECTF--
+Warning: ldap_read(): supplied argument is not a valid ldap link resource in %s on line %d