Blame SOURCES/php-5.4.16-CVE-2015-0232.patch
|
 |
20017b |
Adapted for 5.4.16
|
|
|
20017b |
Upstream test dropped as binary patch not supported
|
|
|
20017b |
|
|
|
20017b |
From 2fc178cf448d8e1b95d1314e47eeef610729e0df Mon Sep 17 00:00:00 2001
|
|
|
20017b |
From: Stanislav Malyshev <stas@php.net>
|
|
|
20017b |
Date: Sun, 11 Jan 2015 00:51:05 -0800
|
|
|
20017b |
Subject: [PATCH] Fix bug #68799: Free called on unitialized pointer
|
|
|
20017b |
|
|
|
20017b |
---
|
|
|
20017b |
ext/exif/exif.c | 2 +-
|
|
|
20017b |
ext/exif/tests/bug68799.jpg | Bin 0 -> 735 bytes
|
|
|
20017b |
ext/exif/tests/bug68799.phpt | 63 +++++++++++++++++++++++++++++++++++++++++++
|
|
|
20017b |
3 files changed, 64 insertions(+), 1 deletion(-)
|
|
|
20017b |
create mode 100644 ext/exif/tests/bug68799.jpg
|
|
|
20017b |
create mode 100644 ext/exif/tests/bug68799.phpt
|
|
|
20017b |
|
|
|
20017b |
diff --git a/ext/exif/exif.c b/ext/exif/exif.c
|
|
|
20017b |
index 637ebf9..7f95ff4 100644
|
|
|
20017b |
--- a/ext/exif/exif.c
|
|
|
20017b |
+++ b/ext/exif/exif.c
|
|
|
20017b |
@@ -2700,7 +2700,7 @@
|
|
|
20017b |
static int exif_process_unicode(image_info_type *ImageInfo, xp_field_type *xp_field, int tag, char *szValuePtr, int ByteCount TSRMLS_DC)
|
|
|
20017b |
{
|
|
|
20017b |
xp_field->tag = tag;
|
|
|
20017b |
-
|
|
|
20017b |
+ xp_field->value = NULL;
|
|
|
20017b |
/* Copy the comment */
|
|
|
20017b |
if (zend_multibyte_encoding_converter(
|
|
|
20017b |
(unsigned char**)&xp_field->value,
|
|
|
20017b |
--
|
|
|
20017b |
2.1.4
|
|
|
20017b |
|