helly           Sun Oct  9 05:55:32 2005 EDT

  Modified files:              
    /php-src/ext/spl    spl_array.c 
  Log:
  - Fix potential SEGV with overloaded objects
  
http://cvs.php.net/diff.php/php-src/ext/spl/spl_array.c?r1=1.84&r2=1.85&ty=u
Index: php-src/ext/spl/spl_array.c
diff -u php-src/ext/spl/spl_array.c:1.84 php-src/ext/spl/spl_array.c:1.85
--- php-src/ext/spl/spl_array.c:1.84    Mon Oct  3 13:58:44 2005
+++ php-src/ext/spl/spl_array.c Sun Oct  9 05:55:30 2005
@@ -16,7 +16,7 @@
    +----------------------------------------------------------------------+
  */
 
-/* $Id: spl_array.c,v 1.84 2005/10/03 17:58:44 helly Exp $ */
+/* $Id: spl_array.c,v 1.85 2005/10/09 09:55:30 helly Exp $ */
 
 #ifdef HAVE_CONFIG_H
 # include "config.h"
@@ -836,6 +836,15 @@
        }
        intern->ar_flags |= ar_flags;
        ZVAL_ADDREF(intern->array);
+       if (Z_TYPE_P(array) == IS_OBJECT) {
+               zend_object_get_properties_t handler = Z_OBJ_HANDLER_P(array, 
get_properties);
+               if ((handler != std_object_handlers.get_properties && handler 
!= spl_array_get_properties)
+               || !spl_array_get_hash_table(intern, 0 TSRMLS_CC)) {
+                       php_set_error_handling(EH_NORMAL, NULL TSRMLS_CC);
+                       
zend_throw_exception_ex(U_CLASS_ENTRY(spl_ce_InvalidArgumentException), 0 
TSRMLS_CC, "Overloaded object of type %s is not compatible with %s", 
Z_OBJCE_P(array)->name, intern->std.ce->name);
+                       return;
+               }
+       }
        
        spl_array_rewind(intern TSRMLS_CC);
 

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to