From 8080b6bbd370d3056d98e816b31b2ff31d5b77ae Mon Sep 17 00:00:00 2001 From: Ilia Alshanetsky Date: Fri, 27 Feb 2004 00:30:45 +0000 Subject: MFH: Fixed possible crash inside sqlite_escape_string() and sqlite_udf_encode_binary(). --- ext/sqlite/sqlite.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ext/sqlite/sqlite.c b/ext/sqlite/sqlite.c index d8348daca4..1db8528f36 100644 --- a/ext/sqlite/sqlite.c +++ b/ext/sqlite/sqlite.c @@ -1736,7 +1736,7 @@ PHP_FUNCTION(sqlite_escape_string) /* binary string */ int enclen; - ret = emalloc( 1 + ((256 * stringlen + 1262) / 253) ); + ret = emalloc( 1 + 5 + stringlen * (256 / 253) ); ret[0] = '\x01'; enclen = sqlite_encode_binary((const unsigned char*)string, stringlen, ret+1); RETVAL_STRINGL(ret, enclen+1, 0); @@ -1941,7 +1941,7 @@ PHP_FUNCTION(sqlite_udf_encode_binary) int enclen; char *ret; - ret = emalloc( 1 + ((256 * datalen + 1262) / 253) ); + ret = emalloc( 1 + 5 + datalen * (256 / 253) ); ret[0] = '\x01'; enclen = sqlite_encode_binary((const unsigned char*)data, datalen, ret+1); RETVAL_STRINGL(ret, enclen+1, 0); -- cgit v1.2.1