Synced mail function in mb_send_mail function(Escape mail.force_extra_parameters...

diff --git a/ext/mbstring/mbstring.c b/ext/mbstring/mbstring.c
index be3acfdd8539e9e19f2d904e569f4ec363e74fbb..0c15a589485648d46ce170ec81d64d35930ac7ff 100644 (file)
--- a/ext/mbstring/mbstring.c
+++ b/ext/mbstring/mbstring.c
@@ -3770,7 +3770,7 @@ PHP_FUNCTION(mb_send_mail)
        headers = (char *)device.buffer;
 
        if (force_extra_parameters) {
-               extra_cmd = estrdup(force_extra_parameters);
+               extra_cmd = php_escape_shell_cmd(force_extra_parameters);
        } else if (extra_cmd) {
                extra_cmd = php_escape_shell_cmd(extra_cmd);
        }