From: Gustavo André dos Santos Lopes Date: Wed, 29 Sep 2010 18:58:58 +0000 (+0000) Subject: - Fixed bug #52944 (Invalid write on second and subsequent reads with an inflate... X-Git-Tag: php-5.3.4RC1~189 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=0db999a94fa84673c1a97b3296ac91d165ec33d9;p=php - Fixed bug #52944 (Invalid write on second and subsequent reads with an inflate filter fed invalid data). --- diff --git a/NEWS b/NEWS index 0f968246e0..930b4a09ff 100644 --- a/NEWS +++ b/NEWS @@ -24,6 +24,8 @@ - Fixed bug #52947 (segfault when ssl stream option capture_peer_cert_chain used). (Felipe) +- Fixed bug #52944 (Invalid write on second and subsequent reads with an + inflate filter fed invalid data). (Gustavo) - Fixed bug #52931 (strripos not overloaded with function overloading enabled). (Felipe) - Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with diff --git a/ext/zlib/tests/bug_52944.phpt b/ext/zlib/tests/bug_52944.phpt new file mode 100644 index 0000000000..850371190e --- /dev/null +++ b/ext/zlib/tests/bug_52944.phpt @@ -0,0 +1,157 @@ +--TEST-- +Bug #52944 (segfault with zlib filter and corrupted data) +--SKIPIF-- + +--INI-- +allow_url_fopen=1 +--FILE-- +strm.next_in = data->inbuf; + data->strm.avail_in = 0; return PSFS_ERR_FATAL; } desired -= data->strm.avail_in; /* desired becomes what we consumed this round through */