diff --git a/ext/filter/logical_filters.c b/ext/filter/logical_filters.c index a9fcc01d01972..392156b5391ce 100644 --- a/ext/filter/logical_filters.c +++ b/ext/filter/logical_filters.c @@ -233,6 +233,9 @@ void php_filter_int(PHP_INPUT_FILTER_PARAM_DECL) /* {{{ */ p++; len--; if (allow_hex && (*p == 'x' || *p == 'X')) { p++; len--; + if (len == 0) { + RETURN_VALIDATION_FAILED + } if (php_filter_parse_hex(p, len, &ctx_value) < 0) { error = 1; } diff --git a/ext/filter/tests/bug80584.phpt b/ext/filter/tests/bug80584.phpt new file mode 100644 index 0000000000000..ede6a4bcdc818 --- /dev/null +++ b/ext/filter/tests/bug80584.phpt @@ -0,0 +1,18 @@ +--TEST-- +Bug #80584: "0x" and "0X" are considered valid hex numbers by filter_var() +--SKIPIF-- + +--FILE-- + +--EXPECT-- +bool(false) +bool(false) +bool(false) +int(0)