diff options
author | Christoph M. Becker <cmbecker69@gmx.de> | 2018-03-27 18:42:55 +0200 |
---|---|---|
committer | Stanislav Malyshev <stas@php.net> | 2018-04-22 20:15:02 -0700 |
commit | b4e4788c4461449b4587e19ef1f474ce938e4980 (patch) | |
tree | 1ee96d145f812a8bfef219cbdbb6ee8362cbef48 /ext/pdo_sqlite/php_pdo_sqlite_int.h | |
parent | 36239fee3638a8f4cfe3ca3aba597cb1699abd90 (diff) | |
download | php-git-b4e4788c4461449b4587e19ef1f474ce938e4980.tar.gz |
Fix #76130: Heap Buffer Overflow (READ: 1786) in exif_iif_add_value
The MakerNote is not necessarily null-terminated, so we must not use
`strlen()` to avoid OOB reads. Instead `php_strnlen()` is the proper
way to handle this.
Diffstat (limited to 'ext/pdo_sqlite/php_pdo_sqlite_int.h')
0 files changed, 0 insertions, 0 deletions