diff options
| author | Christopher Jones <christopher.jones@oracle.com> | 2015-11-07 02:24:17 +1100 |
|---|---|---|
| committer | Anatol Belski <ab@php.net> | 2015-11-08 09:20:33 +0100 |
| commit | 9bc819d943de91f2ea3d08afd76abb63dc61b52c (patch) | |
| tree | 0620127235b0d8e7d3f90c719b351a2533fad890 | |
| parent | 3c8fac95b02dd879fd2b03283c57a109ebf160c9 (diff) | |
| download | php-git-9bc819d943de91f2ea3d08afd76abb63dc61b52c.tar.gz | |
Fix bug 68298 (PHP OCI8 OCI int overflow) (Senthil)
| -rw-r--r-- | ext/oci8/oci8_statement.c | 5 | ||||
| -rw-r--r-- | ext/oci8/tests/bug68298.phpt | 51 |
2 files changed, 56 insertions, 0 deletions
diff --git a/ext/oci8/oci8_statement.c b/ext/oci8/oci8_statement.c index a23ed2bbb1..4ec7d2964a 100644 --- a/ext/oci8/oci8_statement.c +++ b/ext/oci8/oci8_statement.c @@ -1149,8 +1149,13 @@ int php_oci_bind_by_name(php_oci_statement *statement, char *name, size_t name_l return 1; } convert_to_long(var); +#if defined(OCI_MAJOR_VERSION) && OCI_MAJOR_VERSION > 10 + bind_data = (ub8 *)&Z_LVAL_P(var); + value_sz = sizeof(ub8); +#else bind_data = (ub4 *)&Z_LVAL_P(var); value_sz = sizeof(ub4); +#endif mode = OCI_DEFAULT; break; diff --git a/ext/oci8/tests/bug68298.phpt b/ext/oci8/tests/bug68298.phpt new file mode 100644 index 0000000000..223faa5cad --- /dev/null +++ b/ext/oci8/tests/bug68298.phpt @@ -0,0 +1,51 @@ +--TEST-- +Bug #68298 (OCI int overflow) +--SKIPIF-- +<?php +if (!extension_loaded('oci8')) die ("skip no oci8 extension"); +if (PHP_INT_SIZE != 8) die("skip this test is for 64bit platforms only"); +?> +--FILE-- +<?php + +require(dirname(__FILE__).'/connect.inc'); + +$stmtarray = array( + "DROP TABLE BUG68298", + "CREATE TABLE BUG68298 (COL1 NUMBER(20))" +); + +oci8_test_sql_execute($c, $stmtarray); + +$s = oci_parse($c, "INSERT INTO BUG68298 VALUES (:INTVALUE)"); +$intvalue = 1152921504606846975; +oci_bind_by_name($s, ":INTVALUE", $intvalue, -1, SQLT_INT); +oci_execute($s); + +$s = oci_parse($c, "INSERT INTO BUG68298 VALUES (:INTVALUE)"); +$intvalue = -1152921504606846975; +oci_bind_by_name($s, ":INTVALUE", $intvalue, -1, SQLT_INT); +oci_execute($s); + + +$s = oci_parse($c, "SELECT COL1 FROM BUG68298"); +oci_execute($s); +oci_fetch_all($s, $r); +var_dump($r); + +$stmtarray = array("DROP TABLE BUG68298"); +oci8_test_sql_execute($c, $stmtarray); +?> +===DONE=== +<?php exit(0); ?> +--EXPECTF-- +array(1) { + ["COL1"]=> + array(2) { + [0]=> + string(19) "1152921504606846975" + [1]=> + string(20) "-1152921504606846975" + } +} +===DONE=== |