File php74-CVE-2023-0568.patch of Package php74

Overview Repositories Revisions Requests Users Attributes Meta

File php74-CVE-2023-0568.patch of Package php74

Index: php-7.2.34/ext/dom/document.c
===================================================================
--- php-7.2.34.orig/ext/dom/document.c
+++ php-7.2.34/ext/dom/document.c
@@ -1359,7 +1359,7 @@ static xmlDocPtr dom_document_parser(zva
 	int validate, recover, resolve_externals, keep_blanks, substitute_ent;
 	int resolved_path_len;
 	int old_error_reporting = 0;
-	char *directory=NULL, resolved_path[MAXPATHLEN];
+	char *directory=NULL, resolved_path[MAXPATHLEN + 1];
 
 	if (id != NULL) {
 		intern = Z_DOMOBJ_P(id);
Index: php-7.2.34/ext/xmlreader/php_xmlreader.c
===================================================================
--- php-7.2.34.orig/ext/xmlreader/php_xmlreader.c
+++ php-7.2.34/ext/xmlreader/php_xmlreader.c
@@ -1040,7 +1040,7 @@ PHP_METHOD(xmlreader, XML)
 	xmlreader_object *intern = NULL;
 	char *source, *uri = NULL, *encoding = NULL;
 	int resolved_path_len, ret = 0;
-	char *directory=NULL, resolved_path[MAXPATHLEN];
+	char *directory=NULL, resolved_path[MAXPATHLEN + 1];
 	xmlParserInputBufferPtr inputbfr;
 	xmlTextReaderPtr reader;
 
Index: php-7.2.34/main/fopen_wrappers.c
===================================================================
--- php-7.2.34.orig/main/fopen_wrappers.c
+++ php-7.2.34/main/fopen_wrappers.c
@@ -135,10 +135,10 @@ PHPAPI ZEND_INI_MH(OnUpdateBaseDir)
 */
 PHPAPI int php_check_specific_open_basedir(const char *basedir, const char *path)
 {
-	char resolved_name[MAXPATHLEN];
-	char resolved_basedir[MAXPATHLEN];
+	char resolved_name[MAXPATHLEN + 1];
+	char resolved_basedir[MAXPATHLEN + 1];
 	char local_open_basedir[MAXPATHLEN];
-	char path_tmp[MAXPATHLEN];
+	char path_tmp[MAXPATHLEN + 1];
 	char *path_file;
 	size_t resolved_basedir_len;
 	size_t resolved_name_len;

Places

File php74-CVE-2023-0568.patch of Package php74

Places