From 6b58d80b69896dfbe866196ee0b666be9724a802 Mon Sep 17 00:00:00 2001 From: Rasmus Lerdorf Date: Wed, 15 Jul 2009 19:05:09 +0000 Subject: [PATCH] Limit connection strings to 255 chars here --- ext/mssql/php_mssql.c | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/ext/mssql/php_mssql.c b/ext/mssql/php_mssql.c index 02bfc9543c..c2702d197c 100644 --- a/ext/mssql/php_mssql.c +++ b/ext/mssql/php_mssql.c @@ -550,6 +550,17 @@ static void php_mssql_do_connect(INTERNAL_FUNCTION_PARAMETERS, int persistent) return; } + /* Limit strings to 255 chars to prevent overflow issues in underlying libraries */ + if(host_len>255) { + host[255] = '\0'; + } + if(user_len>255) { + user[255] = '\0'; + } + if(passwd_len>255) { + passwd[255] = '\0'; + } + switch(ZEND_NUM_ARGS()) { case 0: -- 2.40.0