php-src/ext/iconv
Niels Dossche ddbd396aa2
Fix GH-17047: UAF on iconv filter failure
The first while loop sets the bucket variable, and this is freed in
out_failure. However, when the second "goto out_failure" is triggered
then bucket still refers to the bucket from the first while loop,
causing a UAF.
Fix this by separating the error paths.

Closes GH-17058.
2024-12-06 17:43:38 +01:00
..
tests Fix GH-17047: UAF on iconv filter failure 2024-12-06 17:43:38 +01:00
config.m4 Fix GH-13727: macro generating invalid call test prototypes fixes. 2024-03-18 06:53:39 +00:00
config.w32 Drop support for iconv without proper errno setting 2020-03-17 14:02:29 +01:00
CREDITS Trim trailing whitespace in source code files 2018-10-13 14:17:28 +02:00
iconv.c Fix GH-17047: UAF on iconv filter failure 2024-12-06 17:43:38 +01:00
iconv.stub.php Rename @cname to @cvalue in stubs (#9043) 2022-07-19 15:11:42 +02:00
iconv_arginfo.h Do not generate CONST_CS when registering constants (#9439) 2022-08-28 08:27:19 +02:00
php_iconv.def
php_iconv.h Remove unnecessary PHP_FUNCTION() declarations (#7472) 2021-09-07 10:04:00 +02:00