integer overflow tm2unixtime.c:481:12

[chongwick]

Description

The following code:

<?php
echo date_sun_info(PHP_INT_MIN, 9, 90);
?>

Resulted in this output:

/home/dan/php-8.3.9/ext/date/lib/tm2unixtime.c:481:12: runtime error: signed integer overflow: -4611686018427403200 + -4611686018427403200 cannot be represented in type 'long long int'

PHP Version

8.3.9

Operating System

No response

[cmb69]

php-src/ext/date/lib/tm2unixtime.c

Lines 473 to 478 in ae505db

	/* You might be wondering, why this code does this in two steps. This is because
	* timelib_epoch_days_from_time(time) * SECS_PER_DAY with the lowest limit of
	* timelib_epoch_days_from_time() is less than the range of an int64_t. This then overflows. In
	* order to be able to still allow for any time in that day that only halfly fits in the int64_t
	* range, we add the time element first, which is always positive, and then twice half the value
	* of the earliest day as expressed as unix timestamp. */