summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSara Golemon <sgolemon@fb.com>2015-06-17 13:34:42 -0700
committerSara Golemon <sgolemon@fb.com>2015-06-17 13:34:42 -0700
commit51a259f378434f373a4c4a86c364a1b83f6ade7f (patch)
tree4f30571a573f2ae7db61569747c4fd28965434a9
parent653c869348b7626d43a30f67be9362fbcce10d2b (diff)
parentc4dd65c723a0b7dd5547142a1cf6309b86161969 (diff)
downloadphp-git-51a259f378434f373a4c4a86c364a1b83f6ade7f.tar.gz
Merge branch 'PHP-5.6'
* PHP-5.6: Fix buffer growth in sockets/conversion.c Implements extended error messages
-rw-r--r--ext/sockets/conversions.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/ext/sockets/conversions.c b/ext/sockets/conversions.c
index f6a86315b1..7467c1f369 100644
--- a/ext/sockets/conversions.c
+++ b/ext/sockets/conversions.c
@@ -889,8 +889,8 @@ static void from_zval_write_control(const zval *arr,
if (space_left < req_space) {
*control_buf = safe_erealloc(*control_buf, 2, req_space, *control_len);
*control_len += 2 * req_space;
- memset(*control_buf, '\0', *control_len - *offset);
- memcpy(&alloc->data, *control_buf, sizeof *control_buf);
+ memset(*control_buf + *offset, '\0', *control_len - *offset);
+ memcpy(&alloc->data, control_buf, sizeof *control_buf);
}
cmsghdr = (struct cmsghdr*)(((char*)*control_buf) + *offset);