From f089be829163c12b321ad77466d5c7bf320f2332 Mon Sep 17 00:00:00 2001 From: Dmitry Stogov Date: Mon, 12 May 2014 11:17:12 +0400 Subject: [PATCH] Fixed wrong buffer length (added place for terminating zero) --- Zend/zend_API.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Zend/zend_API.c b/Zend/zend_API.c index f944de9df3..6ef4c0b467 100644 --- a/Zend/zend_API.c +++ b/Zend/zend_API.c @@ -2883,11 +2883,11 @@ static int zend_is_callable_check_func(int check_flags, zval *callable, zend_fca /* Skip leading \ */ if (Z_STRVAL_P(callable)[0] == '\\') { - lmname = do_alloca(Z_STRLEN_P(callable) - 1, use_heap); + lmname = do_alloca(Z_STRLEN_P(callable), use_heap); lmname_len = Z_STRLEN_P(callable) - 1; zend_str_tolower_copy(lmname, Z_STRVAL_P(callable) + 1, lmname_len); } else { - lmname = do_alloca(Z_STRLEN_P(callable), use_heap); + lmname = do_alloca(Z_STRLEN_P(callable) + 1, use_heap); lmname_len = Z_STRLEN_P(callable); zend_str_tolower_copy(lmname, Z_STRVAL_P(callable), lmname_len); } -- 2.40.0