VladPolskiy/php-src
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'PHP-8.2' into PHP-8.3

Browse Source 
* PHP-8.2:
  Fix is_zend_ptr() huge block comparison
This commit is contained in:
Niels Dossche
2024-11-26 19:24:31 +01:00
parent e43a398149 18674e39ad
commit 02b1056714
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
NEWS
View File

@ -14,6 +14,7 @@ PHP NEWS
(nielsdos) (nielsdos)
. Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs). . Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
(nielsdos) (nielsdos)
. Fix is_zend_ptr() huge block comparison. (nielsdos)
- Curl: - Curl:
. Fixed bug GH-16802 (open_basedir bypass using curl extension). (nielsdos) . Fixed bug GH-16802 (open_basedir bypass using curl extension). (nielsdos)

4
Zend/zend_alloc.c
View File

@ -2471,8 +2471,8 @@ ZEND_API bool is_zend_ptr(const void *ptr)
zend_mm_huge_list *block = AG(mm_heap)->huge_list; zend_mm_huge_list *block = AG(mm_heap)->huge_list;
while (block) { while (block) {
if (ptr >= (void*)block if (ptr >= block->ptr
&& ptr < (void*)((char*)block + block->size)) { && ptr < (void*)((char*)block->ptr + block->size)) {
return 1; return 1;
} }
block = block->next; block = block->next;