Merge branch 'PHP-5.5' into PHP-5.6.20

* PHP-5.5: Fixed bug #71704 php_snmp_error() Format String Vulnerability
php · Mar 29, 2016 · 0b92349 · 0b92349
2 parents a50e1cb + 9c19a08
commit 0b92349
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ext/snmp/snmp.c b/ext/snmp/snmp.c
@@ -531,7 +531,7 @@ static void php_snmp_error(zval *object, const char *docref TSRMLS_DC, int type,
 	}
 
 	if (object && (snmp_object->exceptions_enabled & type)) {
-		zend_throw_exception_ex(php_snmp_exception_ce, type TSRMLS_CC, snmp_object->snmp_errstr);
+		zend_throw_exception_ex(php_snmp_exception_ce, type TSRMLS_CC, "%s", snmp_object->snmp_errstr);
 	} else {
 		va_start(args, format);
 		php_verror(docref, "", E_WARNING, format, args TSRMLS_CC);