Fixed bug #26201 (crash in ibase_trans() on invalid link handle).

diff --git a/NEWS b/NEWS
index 8f933796b1651399e688b9df06c49a63f182ad2b..3f636142bdfdeb1ac327525abb6a7050e92ccad5 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,7 @@ PHP 4                                                                      NEWS
 ?? ??? 2003, Version 4.3.5
 - Fixed header handler in NSAPI SAPI module (header->replace was ignored,
   send_default_content_type now sends value from php.ini). (Uwe Schindler)
+- Fixed bug #26201 (crash in ibase_trans() on invalid link handle). (Ilia)
 - Fixed bug #26198 (strtotime() handling of M/F Y date format). (Ilia)
 - Fixed bug #26176 (Fixed handling of numeric keys in INI files). (Ilia)
 - Fixed bug #26168 (shtool availability check in phpize). 

diff --git a/ext/interbase/interbase.c b/ext/interbase/interbase.c
index ab60f9f84df8bc79d5e25c6533bf9117a2e74739..0a58ca01b85424288354006ed796d932af9230a4 100644 (file)
--- a/ext/interbase/interbase.c
+++ b/ext/interbase/interbase.c
@@ -1493,7 +1493,7 @@ PHP_FUNCTION(ibase_trans)
        zval ***args;
        char tpb[20], *tpbp = NULL;
        long trans_argl = 0;
-       int tpb_len = 0, argn, link_id, trans_n = 0, i;
+       int tpb_len = 0, argn, link_id = 0, trans_n = 0, i;
        ibase_db_link *ib_link;
        ibase_tr_link *ib_trans;
        
@@ -1528,7 +1528,7 @@ PHP_FUNCTION(ibase_trans)
                efree(args);
        }
 
-       if (argn < 2) {
+       if (!link_id) {
                ZEND_FETCH_RESOURCE2(ib_link, ibase_db_link *, NULL, link_id, "InterBase link", le_link, le_plink);
        }