mirror of
https://github.com/php/php-src.git
synced 2025-08-16 05:58:45 +02:00
![]() The first while loop sets the bucket variable, and this is freed in out_failure. However, when the second "goto out_failure" is triggered then bucket still refers to the bucket from the first while loop, causing a UAF. Fix this by separating the error paths. Closes GH-17058. |
||
---|---|---|
.. | ||
tests | ||
config.m4 | ||
config.w32 | ||
CREDITS | ||
iconv.c | ||
iconv.stub.php | ||
iconv_arginfo.h | ||
php_iconv.def | ||
php_iconv.h |