php/sme8/php-5.3.3-CVE-2012-0830.patch


https://bugzilla.redhat.com/show_bug.cgi?id=786686

--- php-5.3.3/main/php_variables.c.cve0830
+++ php-5.3.3/main/php_variables.c
@@ -198,6 +198,9 @@ PHPAPI void php_register_variable_ex(cha
                                                MAKE_STD_ZVAL(gpc_element);
                                                array_init(gpc_element);
                                                zend_symtable_update(symtable1, escaped_index, index_len + 1, &gpc_element, sizeof(zval *), (void **) &gpc_element_p);
+                                       } else {
+                                               efree(var_orig);
+                                               return;
                                        }
                                }
                                if (index != escaped_index) {
1
2	https://bugzilla.redhat.com/show_bug.cgi?id=786686
3
4	--- php-5.3.3/main/php_variables.c.cve0830
5	+++ php-5.3.3/main/php_variables.c
6	@@ -198,6 +198,9 @@ PHPAPI void php_register_variable_ex(cha
7	MAKE_STD_ZVAL(gpc_element);
8	array_init(gpc_element);
9	zend_symtable_update(symtable1, escaped_index, index_len + 1, &gpc_element, sizeof(zval ), (void *) &gpc_element_p);
10	+ } else {
11	+ efree(var_orig);
12	+ return;
13	}
14	}
15	if (index != escaped_index) {