]> granicus.if.org Git - php/commitdiff
Fix length to copy
authorAnatol Belski <ab@php.net>
Tue, 31 Jul 2018 15:31:13 +0000 (17:31 +0200)
committerAnatol Belski <ab@php.net>
Tue, 31 Jul 2018 15:31:57 +0000 (17:31 +0200)
Zend/zend_API.c

index efa40314c394c6c37a17158e7453b79215ac49b4..d1288326eafbc72c31d53ead17a454203601abc9 100644 (file)
@@ -3001,7 +3001,7 @@ static zend_always_inline int zend_is_callable_check_func(int check_flags, zval
                if (UNEXPECTED(Z_STRVAL_P(callable)[0] == '\\')) {
                        /* Skip leading \ */
                        ZSTR_ALLOCA_ALLOC(lmname, Z_STRLEN_P(callable) - 1, use_heap);
-                       zend_str_tolower_copy(ZSTR_VAL(lmname), Z_STRVAL_P(callable) + 1, Z_STRLEN_P(callable));
+                       zend_str_tolower_copy(ZSTR_VAL(lmname), Z_STRVAL_P(callable) + 1, Z_STRLEN_P(callable) - 1);
                        func = zend_fetch_function(lmname);
                        ZSTR_ALLOCA_FREE(lmname, use_heap);
                } else {