mirror of
https://github.com/php/php-src.git
synced 2026-03-24 00:02:20 +01:00
When pos.size is less than 2, the subtraction pos.size - 2 causes an unsigned integer underflow, resulting in a ~4GB allocation attempt. Add minimum size check (pos.size >= 2) to prevent the underflow. Closes GH-20630.