]> granicus.if.org Git - php/commitdiff
Prevent possible integer overflow
authorDmitry Stogov <dmitry@php.net>
Wed, 2 Nov 2011 08:07:12 +0000 (08:07 +0000)
committerDmitry Stogov <dmitry@php.net>
Wed, 2 Nov 2011 08:07:12 +0000 (08:07 +0000)
ext/soap/php_http.c

index 7a4bc39da491a3e1c53931460501979e2d5decba..1ca0a1610b563b54c5a6c23e539c229a8599c4ea 100644 (file)
@@ -1383,7 +1383,7 @@ static int get_http_body(php_stream *stream, int close, char *headers,  char **r
                }
 
        } else if (header_length) {
-               if (header_length < 0) {
+               if (header_length < 0 || header_length >= INT_MAX) {
                        return FALSE;
                }
                http_buf = safe_emalloc(1, header_length, 1);