php/archived-php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2026-04-28 10:43:30 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix buffer overflow bugs in CP50222 text conversion code

Browse Source
This commit is contained in:
Alex Dowad
2022-05-23 10:03:36 +02:00
parent 1f17b5468f
commit e2c4fc5755
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ext/mbstring/libmbfl/filters/mbfilter_cp5022x.c
+2 -2
View File
@@ -991,7 +991,7 @@ static void mb_wchar_to_cp50222(uint32_t *in, size_t len, mb_convert_buf *buf, b
out = mb_convert_buf_add(out, s - 0x80);
} else if (s <= 0x927E) {
/* JISX 0208 Kanji */
MB_CONVERT_BUF_ENSURE(buf, out, limit, len + 5);
MB_CONVERT_BUF_ENSURE(buf, out, limit, len + 6);
if (buf->state == JISX_0201_KANA) {
out = mb_convert_buf_add(out, 0xF);
}
@@ -1002,7 +1002,7 @@ static void mb_wchar_to_cp50222(uint32_t *in, size_t len, mb_convert_buf *buf, b
out = mb_convert_buf_add2(out, (s >> 8) & 0xFF, s & 0xFF);
} else if (s >= 0x10000) {
/* JISX 0201 Latin; we 'tag' these by adding 0x10000 */
MB_CONVERT_BUF_ENSURE(buf, out, limit, len + 4);
MB_CONVERT_BUF_ENSURE(buf, out, limit, len + 5);
if (buf->state == JISX_0201_KANA) {
out = mb_convert_buf_add(out, 0xF);
}