Don't trust snprintf return

diff --git a/Zend/zend.c b/Zend/zend.c
index 3ba958f11a4200548c15077c90d3d323983d9d96..8e706b2481db6afd3418ae41c27f2541b31198c9 100644 (file)
--- a/Zend/zend.c
+++ b/Zend/zend.c
@@ -615,6 +615,9 @@ ZEND_API void zend_error(int type, const char *format, ...)
 
 #ifdef HAVE_VSNPRINTF
                        z_error_message->value.str.len = vsnprintf(z_error_message->value.str.val, ZEND_ERROR_BUFFER_SIZE, format, args);
+                       if(z_error_message->value.str.len > ZEND_ERROR_BUFFER_SIZE-1) {
+                               z_error_message->value.str.len = ZEND_ERROR_BUFFER_SIZE-1;
+                       }
 #else
                        /* This is risky... */
                        z_error_message->value.str.len = vsprintf(z_error_message->value.str.val, format, args);