From 4ab69902dcbdeb7feb98faa687867de3a163ff78 Mon Sep 17 00:00:00 2001 From: Ilia Alshanetsky Date: Tue, 21 Dec 2004 15:47:14 +0000 Subject: [PATCH] Fixed possible crash in imap_mail_compose(). --- ext/imap/php_imap.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c index 6703e6ba9c..05eabea324 100644 --- a/ext/imap/php_imap.c +++ b/ext/imap/php_imap.c @@ -2978,6 +2978,10 @@ PHP_FUNCTION(imap_mail_compose) bod->contents.text.data = (char *) fs_get(Z_STRLEN_PP(pvalue) + 1); memcpy(bod->contents.text.data, Z_STRVAL_PP(pvalue), Z_STRLEN_PP(pvalue)+1); bod->contents.text.size = Z_STRLEN_PP(pvalue); + } else { + bod->contents.text.data = (char *) fs_get(1); + bod->contents.text.data = ""; + bod->contents.text.size = 0; } if (zend_hash_find(Z_ARRVAL_PP(data), "lines", sizeof("lines"), (void **) &pvalue)== SUCCESS) { convert_to_long_ex(pvalue); @@ -3081,6 +3085,10 @@ PHP_FUNCTION(imap_mail_compose) bod->contents.text.data = (char *) fs_get(Z_STRLEN_PP(pvalue) + 1); memcpy(bod->contents.text.data, Z_STRVAL_PP(pvalue), Z_STRLEN_PP(pvalue) + 1); bod->contents.text.size = Z_STRLEN_PP(pvalue); + } else { + bod->contents.text.data = (char *) fs_get(1); + bod->contents.text.data = ""; + bod->contents.text.size = 0; } if (zend_hash_find(Z_ARRVAL_PP(data), "lines", sizeof("lines"), (void **) &pvalue)== SUCCESS) { convert_to_long_ex(pvalue); -- 2.50.1