diff options
| author | Stanislav Malyshev <stas@php.net> | 2017-01-02 20:56:32 -0800 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2017-01-02 20:56:32 -0800 |
| commit | fa2125df6766bb7edac0a0bf433940465da9af4b (patch) | |
| tree | 053adf559eee771166e42a2787281d4745dbf855 /ext/exif/exif.c | |
| parent | a65ad951ad95944e357703caa2001f06a4225bf6 (diff) | |
| parent | 1cda0d7c2ffb62d8331c64e703131d9cabdc03ea (diff) | |
| download | php-git-fa2125df6766bb7edac0a0bf433940465da9af4b.tar.gz | |
Merge branch 'PHP-5.6.30' into PHP-5.6
* PHP-5.6.30:
Fix bug #73737 FPE when parsing a tag format
Fix bug #73773 - Seg fault when loading hostile phar
Fix bug #73825 - Heap out of bounds read on unserialize in finish_nested_data()
Fix bug #73768 - Memory corruption when loading hostile phar
Fix int overflows in phar (bug #73764)
Diffstat (limited to 'ext/exif/exif.c')
| -rw-r--r-- | ext/exif/exif.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/exif/exif.c b/ext/exif/exif.c index 8b0e34c10d..83daee6f54 100644 --- a/ext/exif/exif.c +++ b/ext/exif/exif.c @@ -1303,7 +1303,7 @@ static size_t exif_convert_any_to_int(void *value, int format, int motorola_inte if (s_den == 0) { return 0; } else { - return php_ifd_get32s(value, motorola_intel) / s_den; + return (size_t)((double)php_ifd_get32s(value, motorola_intel) / s_den); } case TAG_FMT_SSHORT: return php_ifd_get16u(value, motorola_intel); |