MFH: Fix integer oveflow in strrpos()

This commit is contained in:
Scott MacVicar 2008-07-22 01:10:58 +00:00
parent f349c14414
commit 6c48a01f40
2 changed files with 42 additions and 1 deletions

View file

@ -1842,7 +1842,7 @@ PHP_FUNCTION(strrpos)
p = haystack + offset;
e = haystack + haystack_len - needle_len;
} else {
if (-offset > haystack_len) {
if (-offset > haystack_len || offset < -INT_MAX) {
php_error_docref(NULL TSRMLS_CC, E_NOTICE, "Offset is greater than the length of haystack string");
RETURN_FALSE;
}