From 3800e1cf970ce78c565e98803f799fa50737ecc6 Mon Sep 17 00:00:00 2001 From: Xinchen Hui Date: Thu, 4 Aug 2016 19:10:40 +0800 Subject: [PATCH] Fixed bug #72743 (Out-of-bound read in php_stream_filter_create) --- NEWS | 4 ++++ main/streams/filter.c | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/NEWS b/NEWS index 10961f2c977..c20b29910dd 100644 --- a/NEWS +++ b/NEWS @@ -5,6 +5,10 @@ PHP NEWS - EXIF: . Fixed bug #72735 (Samsung picture thumb not read (zero size)). (Kalle, Remi) +- Stream: + . Fixed bug #72743 (Out-of-bound read in php_stream_filter_create). + (Loianhtuan) + 04 Aug 2016, PHP 7.1.0beta2 - Core: diff --git a/main/streams/filter.c b/main/streams/filter.c index d063c1a9156..e97dea9f21e 100644 --- a/main/streams/filter.c +++ b/main/streams/filter.c @@ -252,10 +252,10 @@ PHPAPI php_stream_filter *php_stream_filter_create(const char *filtername, zval HashTable *filter_hash = (FG(stream_filters) ? FG(stream_filters) : &stream_filters_hash); php_stream_filter_factory *factory = NULL; php_stream_filter *filter = NULL; - int n; + size_t n; char *period; - n = (int)strlen(filtername); + n = strlen(filtername); if (NULL != (factory = zend_hash_str_find_ptr(filter_hash, filtername, n))) { filter = factory->create_filter(filtername, filterparams, persistent);