Fix int/size_t confusion in isValidPharFilename (bug #73580)

diff --git a/ext/phar/phar_object.c b/ext/phar/phar_object.c
index f3e98a6d96f3ed3a101a20837f0b4b4366c2af4d..28ec8a3411efd1f3940b55399f3fa2c0e791866e 100644 (file)
--- a/ext/phar/phar_object.c
+++ b/ext/phar/phar_object.c
@@ -1062,6 +1062,10 @@ PHP_METHOD(Phar, isValidPharFilename)
                return;
        }
 
+       if (ZEND_SIZE_T_INT_OVFL(fname_len)) {
+               RETURN_FALSE;
+       }
+
        is_executable = executable;
        RETVAL_BOOL(phar_detect_phar_fname_ext(fname, fname_len, &ext_str, &ext_len, is_executable, 2, 1) == SUCCESS);
 }