From: Felipe Pena <felipe@php.net>
Date: Fri, 10 Dec 2010 00:47:51 +0000 (+0000)
Subject: - Fixed bug #53512 (NumberFormatter::setSymbol crash on bogus $attr values)
X-Git-Tag: php-5.4.0alpha1~191^2~542
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=43cfda93eba8bf5e10a38fb087197bf8ad408222;p=php

- Fixed bug #53512 (NumberFormatter::setSymbol crash on bogus $attr values)
---

diff --git a/ext/intl/formatter/formatter_attr.c b/ext/intl/formatter/formatter_attr.c
index 851b2b310e..46d61fb1fc 100755
--- a/ext/intl/formatter/formatter_attr.c
+++ b/ext/intl/formatter/formatter_attr.c
@@ -311,6 +311,11 @@ PHP_FUNCTION( numfmt_set_symbol )
 
 		RETURN_FALSE;
 	}
+	
+	if (symbol >= UNUM_FORMAT_SYMBOL_COUNT || symbol < 0) {
+		intl_error_set( NULL, U_ILLEGAL_ARGUMENT_ERROR,	"numfmt_set_symbol: invalid symbol value", 0 TSRMLS_CC );
+		RETURN_FALSE;
+	}
 
 	/* Fetch the object. */
 	FORMATTER_METHOD_FETCH_OBJECT;