tony2001 Thu Jun 29 09:03:00 2006 UTC
Modified files:
/php-src/ext/sysvshm sysvshm.c
Log:
make sure we won't get into endless loop if value shm_var->next is corrupted
http://cvs.php.net/viewvc.cgi/php-src/ext/sysvshm/sysvshm.c?r1=1.72&r2=1.73&diff_format=u
Index: php-src/ext/sysvshm/sysvshm.c
diff -u php-src/ext/sysvshm/sysvshm.c:1.72 php-src/ext/sysvshm/sysvshm.c:1.73
--- php-src/ext/sysvshm/sysvshm.c:1.72 Sun Jan 1 13:09:56 2006
+++ php-src/ext/sysvshm/sysvshm.c Thu Jun 29 09:03:00 2006
@@ -16,7 +16,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: sysvshm.c,v 1.72 2006/01/01 13:09:56 sniper Exp $ */
+/* $Id: sysvshm.c,v 1.73 2006/06/29 09:03:00 tony2001 Exp $ */
/* This has been built and tested on Linux 2.2.14
*
@@ -408,6 +408,10 @@
return pos;
}
pos += shm_var->next;
+
+ if (shm_var->next <= 0 || pos < ptr->start) {
+ return -1;
+ }
}
return -1;
}
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
