Fix bug #72674 - check both curl_escape and curl_unescape

php · Aug 3, 2016 · 72dbb7f · 72dbb7f
1 parent 1bcd439
commit 72dbb7f
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/ext/curl/interface.c b/ext/curl/interface.c
@@ -3529,6 +3529,10 @@ PHP_FUNCTION(curl_escape)
 		RETURN_FALSE;
 	}
 
+	if (ZEND_SIZE_T_INT_OVFL(str_len)) {
+		RETURN_FALSE;
+	}
+
 	if ((res = curl_easy_escape(ch->cp, str, str_len))) {
 		RETVAL_STRING(res);
 		curl_free(res);
@@ -3556,7 +3560,7 @@ PHP_FUNCTION(curl_unescape)
 		RETURN_FALSE;
 	}
 
-	if (str_len > INT_MAX) {
+	if (ZEND_SIZE_T_INT_OVFL(str_len)) {
 		RETURN_FALSE;
 	}