php/sme8/php-5.3.3-CVE-2010-4156.patch

--- php-5.3.3/ext/mbstring/libmbfl/mbfl/mbfilter.c.cve4156
+++ php-5.3.3/ext/mbstring/libmbfl/mbfl/mbfilter.c
@@ -1397,6 +1397,10 @@ mbfl_strcut(
                        start = string->val + from;
                        end   = start + (length & -4);
                } else if ((encoding->flag & MBFL_ENCTYPE_SBCS)) {
+                       if (from + length >= string->len) {
+                               length = string->len - from;
+                       }
+
                        start = string->val + from;
                        end = start + length;
                } else if (encoding->mblen_table != NULL) {
1	--- php-5.3.3/ext/mbstring/libmbfl/mbfl/mbfilter.c.cve4156
2	+++ php-5.3.3/ext/mbstring/libmbfl/mbfl/mbfilter.c
3	@@ -1397,6 +1397,10 @@ mbfl_strcut(
4	start = string->val + from;
5	end = start + (length & -4);
6	} else if ((encoding->flag & MBFL_ENCTYPE_SBCS)) {
7	+ if (from + length >= string->len) {
8	+ length = string->len - from;
9	+ }
10	+
11	start = string->val + from;
12	end = start + length;
13	} else if (encoding->mblen_table != NULL) {