php/sme8/php-5.3.3-CVE-2010-4156.patch

--- php-5.3.3/ext/mbstring/libmbfl/mbfl/mbfilter.c.cve4156
+++ php-5.3.3/ext/mbstring/libmbfl/mbfl/mbfilter.c
@@ -1397,6 +1397,10 @@ mbfl_strcut(
                        start = string->val + from;
                        end   = start + (length & -4);
                } else if ((encoding->flag & MBFL_ENCTYPE_SBCS)) {
+                       if (from + length >= string->len) {
+                               length = string->len - from;
+                       }
+
                        start = string->val + from;
                        end = start + length;
                } else if (encoding->mblen_table != NULL) {
1	slords	1.1	--- php-5.3.3/ext/mbstring/libmbfl/mbfl/mbfilter.c.cve4156
2			+++ php-5.3.3/ext/mbstring/libmbfl/mbfl/mbfilter.c
3			@@ -1397,6 +1397,10 @@ mbfl_strcut(
4			start = string->val + from;
5			end = start + (length & -4);
6			} else if ((encoding->flag & MBFL_ENCTYPE_SBCS)) {
7			+ if (from + length >= string->len) {
8			+ length = string->len - from;
9			+ }
10			+
11			start = string->val + from;
12			end = start + length;
13			} else if (encoding->mblen_table != NULL) {