Remi Collet 2c204a55af Fixed Bug #66987 Memory corruption in fileinfo ext (bigendian) ...

On little endian:
	map->p == php_magic_database
	map->magic[i] = pointer into the map

	map->p == NULL
	map->magic[i] = pointer to allocated memory

On big endian (ppc64, s390x, ...):
	map->p != php_magic_database and map->p != NULL
        map->magic[i] = pointer into a copy of the map

Trying to efree pointer in the later cause memory corruption
Thanks to dkatulek / Red Hat for the report.

2014-03-31 16:50:47 +02:00

65 KiB

Raw Blame History

View Raw