summaryrefslogtreecommitdiff
path: root/ext/intl/msgformat/msgformat_format.c
diff options
context:
space:
mode:
authorStanislav Malyshev <stas@php.net>2016-09-12 21:09:30 -0700
committerStanislav Malyshev <stas@php.net>2016-09-12 21:09:30 -0700
commit07c6bdb85d3efe21598ebb8af6fcebceb9d486e9 (patch)
tree0fb02e7c08ec0b50791020ac862fc56e1f475135 /ext/intl/msgformat/msgformat_format.c
parent2d8ab51576695630a7471ff829cc5ea10becdc0f (diff)
parentc984661d39cfa4db1dd97fde1f59c77a44991440 (diff)
downloadphp-git-07c6bdb85d3efe21598ebb8af6fcebceb9d486e9.tar.gz
Merge branch 'PHP-7.0.11' into PHP-7.0
* PHP-7.0.11: (22 commits) Fix bug #72293 - Heap overflow in mysqlnd related to BIT fields I don't think 8cceb012a7aabf3c36ab7c2724a436f976cdd165 is needed Fix test Add check in fgetcsv in case sizeof(unit) != sizeof(size_t) Fix bug #73065: Out-Of-Bounds Read in php_wddx_push_element of wddx.c Fix bug #73035 (Out of bound when verify signature of tar phar in phar_parse_tarfile) Fix bug #73052 - Memory Corruption in During Deserialized-object Destruction Fix bug #73029 - Missing type check when unserializing SplArray Fix bug #72860: wddx_deserialize use-after-free Fix bug #73007: add locale length check Fix bug #72928 - Out of bound when verify signature of zip phar in phar_parse_zipfile sync NEWS Revert "Merge branch 'PHP-5.6' into PHP-7.0" Merge branch 'PHP-5.6' into PHP-7.0 Merge branch 'PHP-5.6' into PHP-7.0 Revert "Revert "Merge branch 'PHP-5.6' into PHP-7.0"" fix version sync NEWS Fix bug #72957 set versions ...
Diffstat (limited to 'ext/intl/msgformat/msgformat_format.c')
-rw-r--r--ext/intl/msgformat/msgformat_format.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/ext/intl/msgformat/msgformat_format.c b/ext/intl/msgformat/msgformat_format.c
index 73fb5eeff6..cb74a3fb1b 100644
--- a/ext/intl/msgformat/msgformat_format.c
+++ b/ext/intl/msgformat/msgformat_format.c
@@ -116,6 +116,8 @@ PHP_FUNCTION( msgfmt_format_message )
RETURN_FALSE;
}
+ INTL_CHECK_LOCALE_LEN(slocale_len);
+
memset(mfo, 0, sizeof(*mfo));
msgformat_data_init(&mfo->mf_data);