Fix bug in from_zval_write_control_array()

diff --git a/ext/sockets/sendrecvmsg.c b/ext/sockets/sendrecvmsg.c
index 837ae2373575a6ebfca1a5a6966aa01ba374a511..0489e977be4e9648ba3fd83680b44569c9c18d9a 100644 (file)
--- a/ext/sockets/sendrecvmsg.c
+++ b/ext/sockets/sendrecvmsg.c
@@ -792,7 +792,7 @@ static void from_zval_write_control_array(const zval *arr, char *msghdr_c, ser_c
     }
 
     msg->msg_control = control_buf;
-    msg->msg_controllen = control_len;
+    msg->msg_controllen = cur_offset; /* not control_len, which may be larger */
 }
 static void to_zval_read_cmsg_data(const char *cmsghdr_c, zval *zv, res_context *ctx)
 {