php/sme8/php-5.3.3-CVE-2012-0830.patch


https://bugzilla.redhat.com/show_bug.cgi?id=786686

--- php-5.3.3/main/php_variables.c.cve0830
+++ php-5.3.3/main/php_variables.c
@@ -198,6 +198,9 @@ PHPAPI void php_register_variable_ex(cha
                                                MAKE_STD_ZVAL(gpc_element);
                                                array_init(gpc_element);
                                                zend_symtable_update(symtable1, escaped_index, index_len + 1, &gpc_element, sizeof(zval *), (void **) &gpc_element_p);
+                                       } else {
+                                               efree(var_orig);
+                                               return;
                                        }
                                }
                                if (index != escaped_index) {
1	slords	1.1.2.1
2			https://bugzilla.redhat.com/show_bug.cgi?id=786686
3
4			--- php-5.3.3/main/php_variables.c.cve0830
5			+++ php-5.3.3/main/php_variables.c
6			@@ -198,6 +198,9 @@ PHPAPI void php_register_variable_ex(cha
7			MAKE_STD_ZVAL(gpc_element);
8			array_init(gpc_element);
9			zend_symtable_update(symtable1, escaped_index, index_len + 1, &gpc_element, sizeof(zval ), (void *) &gpc_element_p);
10			+ } else {
11			+ efree(var_orig);
12			+ return;
13			}
14			}
15			if (index != escaped_index) {