From: Anatol Belski <ab@php.net>
Date: Thu, 3 Nov 2016 16:03:23 +0000 (+0100)
Subject: Fixed bug #73418 Integer Overflow in "_php_imap_mail" leads to crash
X-Git-Tag: php-5.6.29RC1~29^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=99b242a6d093bca1f64084866b4491061de57553;p=php

Fixed bug #73418 Integer Overflow in "_php_imap_mail" leads to crash
---

diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c
index 564473b738..6c392fb0fb 100644
--- a/ext/imap/php_imap.c
+++ b/ext/imap/php_imap.c
@@ -3900,7 +3900,7 @@ int _php_imap_mail(char *to, char *subject, char *message, char *headers, char *
 	char *tsm_errmsg = NULL;
 	ADDRESS *addr;
 	char *bufferTo = NULL, *bufferCc = NULL, *bufferBcc = NULL, *bufferHeader = NULL;
-	int offset, bufferLen = 0;
+	size_t offset, bufferLen = 0;
 	size_t bt_len;
 
 	if (headers) {