File tree Expand file tree Collapse file tree 2 files changed +16
-1
lines changed Expand file tree Collapse file tree 2 files changed +16
-1
lines changed Original file line number Diff line number Diff line change @@ -7272,7 +7272,12 @@ for (;; ptr++)
7272
7272
so far in order to get the number. If the name is not found, leave
7273
7273
the value of recno as 0 for a forward reference. */
7274
7274
7275
- else
7275
+ /* This patch (removing "else") fixes a problem when a reference is
7276
+ to multiple identically named nested groups from within the nest.
7277
+ Once again, it is not the "proper" fix, and it results in an
7278
+ over-allocation of memory. */
7279
+
7280
+ /* else */
7276
7281
{
7277
7282
ng = cd -> named_groups ;
7278
7283
for (i = 0 ; i < cd -> names_found ; i ++ , ng ++ )
Original file line number Diff line number Diff line change
1
+ --TEST--
2
+ CVE-2016-1283, see bug #75207
3
+ --FILE--
4
+ <?php
5
+ preg_match ("/(?:F?+(?:^(?(R)a+ \"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ " , "*b\dc " );
6
+ ?>
7
+ ==DONE==
8
+ --EXPECTF--
9
+ Warning: preg_match(): Compilation failed: unmatched parentheses at offset %d in %s on line %d
10
+ ==DONE==
You can’t perform that action at this time.
0 commit comments