diff options
| author | Sara Golemon <sgolemon@fb.com> | 2015-06-17 13:34:42 -0700 |
|---|---|---|
| committer | Sara Golemon <sgolemon@fb.com> | 2015-06-17 13:34:42 -0700 |
| commit | 51a259f378434f373a4c4a86c364a1b83f6ade7f (patch) | |
| tree | 4f30571a573f2ae7db61569747c4fd28965434a9 | |
| parent | 653c869348b7626d43a30f67be9362fbcce10d2b (diff) | |
| parent | c4dd65c723a0b7dd5547142a1cf6309b86161969 (diff) | |
| download | php-git-51a259f378434f373a4c4a86c364a1b83f6ade7f.tar.gz | |
Merge branch 'PHP-5.6'
* PHP-5.6:
Fix buffer growth in sockets/conversion.c
Implements extended error messages
| -rw-r--r-- | ext/sockets/conversions.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ext/sockets/conversions.c b/ext/sockets/conversions.c index f6a86315b1..7467c1f369 100644 --- a/ext/sockets/conversions.c +++ b/ext/sockets/conversions.c @@ -889,8 +889,8 @@ static void from_zval_write_control(const zval *arr, if (space_left < req_space) { *control_buf = safe_erealloc(*control_buf, 2, req_space, *control_len); *control_len += 2 * req_space; - memset(*control_buf, '\0', *control_len - *offset); - memcpy(&alloc->data, *control_buf, sizeof *control_buf); + memset(*control_buf + *offset, '\0', *control_len - *offset); + memcpy(&alloc->data, control_buf, sizeof *control_buf); } cmsghdr = (struct cmsghdr*)(((char*)*control_buf) + *offset); |
