From: Xinchen Hui Date: Thu, 4 Aug 2016 11:10:40 +0000 (+0800) Subject: Fixed bug #72743 (Out-of-bound read in php_stream_filter_create) X-Git-Tag: php-7.1.0beta3~109 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=3800e1cf970ce78c565e98803f799fa50737ecc6;p=php Fixed bug #72743 (Out-of-bound read in php_stream_filter_create) --- diff --git a/NEWS b/NEWS index 10961f2c97..c20b29910d 100644 --- a/NEWS +++ b/NEWS @@ -5,6 +5,10 @@ PHP NEWS - EXIF: . Fixed bug #72735 (Samsung picture thumb not read (zero size)). (Kalle, Remi) +- Stream: + . Fixed bug #72743 (Out-of-bound read in php_stream_filter_create). + (Loianhtuan) + 04 Aug 2016, PHP 7.1.0beta2 - Core: diff --git a/main/streams/filter.c b/main/streams/filter.c index d063c1a915..e97dea9f21 100644 --- a/main/streams/filter.c +++ b/main/streams/filter.c @@ -252,10 +252,10 @@ PHPAPI php_stream_filter *php_stream_filter_create(const char *filtername, zval HashTable *filter_hash = (FG(stream_filters) ? FG(stream_filters) : &stream_filters_hash); php_stream_filter_factory *factory = NULL; php_stream_filter *filter = NULL; - int n; + size_t n; char *period; - n = (int)strlen(filtername); + n = strlen(filtername); if (NULL != (factory = zend_hash_str_find_ptr(filter_hash, filtername, n))) { filter = factory->create_filter(filtername, filterparams, persistent);