From c0eca50e14a66bb29748b15e2999ccc83e67f506 Mon Sep 17 00:00:00 2001 From: Michael Wallner Date: Fri, 9 Dec 2005 11:52:36 +0000 Subject: [PATCH] - fix read beyond end of key string for var_dump() and fellows --- http_message_object.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/http_message_object.c b/http_message_object.c index f741e65..b84bdfb 100644 --- a/http_message_object.c +++ b/http_message_object.c @@ -476,7 +476,7 @@ static HashTable *_http_message_object_get_props(zval *object TSRMLS_DC) char *m_prop_name; \ int m_prop_len; \ zend_mangle_property_name(&m_prop_name, &m_prop_len, "*", 1, name, lenof(name), 0); \ - add_assoc_ ##ptype## _ex(&array, m_prop_name, sizeof(name)+4, val); \ + add_assoc_ ##ptype## _ex(&array, m_prop_name, sizeof(name)+3, val); \ efree(m_prop_name); \ } #define ASSOC_STRING(array, name, val) ASSOC_STRINGL(array, name, val, strlen(val)) @@ -485,7 +485,7 @@ static HashTable *_http_message_object_get_props(zval *object TSRMLS_DC) char *m_prop_name; \ int m_prop_len; \ zend_mangle_property_name(&m_prop_name, &m_prop_len, "*", 1, name, lenof(name), 0); \ - add_assoc_stringl_ex(&array, m_prop_name, sizeof(name)+4, val, len, 1); \ + add_assoc_stringl_ex(&array, m_prop_name, sizeof(name)+3, val, len, 1); \ efree(m_prop_name); \ } -- 2.30.2