From: Thies C. Arntzen <thies@php.net>
Date: Wed, 22 Dec 1999 14:46:31 +0000 (+0000)
Subject: @- Fixed buffer overruns in iptcembed(). (Thies)
X-Git-Tag: PRE_ISSET_TYPE~111
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=ec33704c3929fc874ef434f623a58d34acfffd82;p=php

@- Fixed buffer overruns in iptcembed(). (Thies)
---

diff --git a/ext/standard/iptc.c b/ext/standard/iptc.c
index 88922be658..cd6d107f4f 100644
--- a/ext/standard/iptc.c
+++ b/ext/standard/iptc.c
@@ -218,7 +218,7 @@ PHP_FUNCTION(iptcembed)
 	if (spool < 2) {
 		fstat(fileno(fp),&sb);
 
-		poi = spoolbuf = emalloc(len + 30 + sb.st_size);
+		poi = spoolbuf = emalloc(len + sizeof(psheader) + sb.st_size + 1024);
 
 		if (! spoolbuf) {
 			fclose(fp);