Fix for bug #72807 - do not produce strings with negative length

This commit is contained in:
Stanislav Malyshev 2016-08-11 23:36:25 -07:00
parent 5a34bd6d1e
commit 1cd6bc6463
2 changed files with 9 additions and 2 deletions

View file

@ -3478,6 +3478,10 @@ PHP_FUNCTION(curl_escape)
ZEND_FETCH_RESOURCE(ch, php_curl *, &zid, -1, le_curl_name, le_curl);
if ((res = curl_easy_escape(ch->cp, str, str_len))) {
if (strlen(res) > INT_MAX) {
php_error_docref(NULL TSRMLS_CC, E_WARNING, "Escaped string is too long, maximum is %d", INT_MAX);
RETURN_FALSE;
}
RETVAL_STRING(res, 1);
curl_free(res);
} else {