From: Ilia Alshanetsky <iliaa@php.net>
Date: Fri, 7 Sep 2007 02:28:26 +0000 (+0000)
Subject: Added missing safety checks for 2nd parameter of setlocale() function
X-Git-Tag: RELEASE_2_0_0a1~1868
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=b9071080f8ca6466569ee893997c23bf3c0ad440;p=php

Added missing safety checks for 2nd parameter of setlocale() function
---

diff --git a/ext/standard/string.c b/ext/standard/string.c
index 838d5b0ded..bf59f11386 100644
--- a/ext/standard/string.c
+++ b/ext/standard/string.c
@@ -6120,6 +6120,10 @@ PHP_FUNCTION(setlocale)
 			loc = NULL;
 		} else {
 			loc = Z_STRVAL_PP(plocale);
+			if (Z_STRLEN_PP(plocale) >= 255) {
+				php_error_docref(NULL TSRMLS_CC, E_WARNING, "Specified locale name is too long");
+				break;
+			}
 		}
 
 		retval = setlocale (cat, loc);