From 7192e8af1531a1ed5568c415b75796f626a7abb2 Mon Sep 17 00:00:00 2001 From: Ilia Alshanetsky Date: Mon, 3 Dec 2007 14:13:27 +0000 Subject: [PATCH] MFB: Fixed bug #43482 (array_pad() does not warn on very small pad numbers). --- ext/standard/array.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/ext/standard/array.c b/ext/standard/array.c index 8c21e486c5..3b19bcd7dd 100644 --- a/ext/standard/array.c +++ b/ext/standard/array.c @@ -2473,6 +2473,11 @@ PHP_FUNCTION(array_pad) /* Do some initial calculations */ input_size = zend_hash_num_elements(Z_ARRVAL_P(input)); pad_size_abs = abs(pad_size); + if (pad_size_abs < 0) { + php_error_docref(NULL TSRMLS_CC, E_WARNING, "You may only pad up to 1048576 elements at a time"); + zval_dtor(return_value); + RETURN_FALSE; + } do_pad = (input_size >= pad_size_abs) ? 0 : 1; /* Copy the original array */ -- 2.50.1