File php7-CVE-2023-0568.patch of Package php7.35979

Overview Repositories Revisions Requests Users Attributes Meta

File php7-CVE-2023-0568.patch of Package php7.35979

Index: php-7.4.33/ext/dom/document.c
===================================================================
--- php-7.4.33.orig/ext/dom/document.c
+++ php-7.4.33/ext/dom/document.c
@@ -1379,7 +1379,7 @@ static xmlDocPtr dom_document_parser(zva
 	int validate, recover, resolve_externals, keep_blanks, substitute_ent;
 	int resolved_path_len;
 	int old_error_reporting = 0;
-	char *directory=NULL, resolved_path[MAXPATHLEN];
+	char *directory=NULL, resolved_path[MAXPATHLEN + 1];
 
 	if (id != NULL) {
 		intern = Z_DOMOBJ_P(id);
Index: php-7.4.33/ext/xmlreader/php_xmlreader.c
===================================================================
--- php-7.4.33.orig/ext/xmlreader/php_xmlreader.c
+++ php-7.4.33/ext/xmlreader/php_xmlreader.c
@@ -1038,7 +1038,7 @@ PHP_METHOD(xmlreader, XML)
 	xmlreader_object *intern = NULL;
 	char *source, *uri = NULL, *encoding = NULL;
 	int resolved_path_len, ret = 0;
-	char *directory=NULL, resolved_path[MAXPATHLEN];
+	char *directory=NULL, resolved_path[MAXPATHLEN + 1];
 	xmlParserInputBufferPtr inputbfr;
 	xmlTextReaderPtr reader;
 
Index: php-7.4.33/main/fopen_wrappers.c
===================================================================
--- php-7.4.33.orig/main/fopen_wrappers.c
+++ php-7.4.33/main/fopen_wrappers.c
@@ -138,10 +138,10 @@ PHPAPI ZEND_INI_MH(OnUpdateBaseDir)
 */
 PHPAPI int php_check_specific_open_basedir(const char *basedir, const char *path)
 {
-	char resolved_name[MAXPATHLEN];
-	char resolved_basedir[MAXPATHLEN];
+	char resolved_name[MAXPATHLEN + 1];
+	char resolved_basedir[MAXPATHLEN + 1];
 	char local_open_basedir[MAXPATHLEN];
-	char path_tmp[MAXPATHLEN];
+	char path_tmp[MAXPATHLEN + 1];
 	char *path_file;
 	size_t resolved_basedir_len;
 	size_t resolved_name_len;

Places

File php7-CVE-2023-0568.patch of Package php7.35979

Places