Fix: Infinite loop caused by smiley code with "["

Complete error description here: http://www.flying-bits.org/tracker.php?p=33&t=978
board3 · Jul 30, 2012 · cea6d2b · cea6d2b
1 parent a72b7b7
commit cea6d2b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/root/includes/trim_message/bbcodes.php b/root/includes/trim_message/bbcodes.php
@@ -364,7 +364,8 @@ static public function get_content_length($content)
 		$content_length = utf8_strlen($content);
 		$last_smiley = false;
 		$last_html_opening = $last_html_closing = 0;
-		while (($last_html_opening = utf8_strpos($content, '<', $last_html_closing)) !== false)
+		while (($last_html_opening = utf8_strpos($content, '<', $last_html_closing)) !== false &&
+			utf8_strpos($content, '>', $last_html_opening) !== false)
 		{
 			$last_html_closing = utf8_strpos($content, '>', $last_html_opening);
 			if (($smiley_code = utf8_substr($content, $last_html_opening + 7, ($last_html_closing - $last_html_opening - 11))) != '--')