From: Nikita Popov <nikita.ppv@gmail.com>
Date: Wed, 19 Jun 2019 13:57:57 +0000 (+0200)
Subject: Suppress overflow UB in zend_strtod
X-Git-Tag: php-7.4.0alpha2~51^2~1
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=b8cba88904a509abd2c141ebcdb952cfd9471063;p=php

Suppress overflow UB in zend_strtod
---

diff --git a/Zend/zend_strtod.c b/Zend/zend_strtod.c
index 96d3ec8c95..08f8424e8c 100644
--- a/Zend/zend_strtod.c
+++ b/Zend/zend_strtod.c
@@ -2705,7 +2705,7 @@ zend_strtod
 				L = c - '0';
 				s1 = s;
 				while((c = *++s) >= '0' && c <= '9')
-					L = 10*L + (c - '0');
+					L = (Long) (10*(ULong)L + (c - '0'));
 				if (s - s1 > 8 || L > 19999)
 					/* Avoid confusion from exponents
 					 * so large that e might overflow.