File tree Expand file tree Collapse file tree 2 files changed +3
-2
lines changed Expand file tree Collapse file tree 2 files changed +3
-2
lines changed Original file line number Diff line number Diff line change @@ -14,6 +14,7 @@ PHP NEWS
14
14
(nielsdos)
15
15
. Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
16
16
(nielsdos)
17
+ . Fix is_zend_ptr() huge block comparison. (nielsdos)
17
18
18
19
- Curl:
19
20
. Fixed bug GH-16802 (open_basedir bypass using curl extension). (nielsdos)
Original file line number Diff line number Diff line change @@ -2471,8 +2471,8 @@ ZEND_API bool is_zend_ptr(const void *ptr)
2471
2471
2472
2472
zend_mm_huge_list * block = AG (mm_heap )-> huge_list ;
2473
2473
while (block ) {
2474
- if (ptr >= ( void * ) block
2475
- && ptr < (void * )((char * )block + block -> size )) {
2474
+ if (ptr >= block -> ptr
2475
+ && ptr < (void * )((char * )block -> ptr + block -> size )) {
2476
2476
return 1 ;
2477
2477
}
2478
2478
block = block -> next ;
You can’t perform that action at this time.
0 commit comments