| commit | 627763e8a94d477c317bd9ed9eb4f6dbc43c5f00 | |
| author | Paul Bissonnette <paulbiss@fb.com> | |
| Tue, 2 Jun 2015 03:37:41 +0000 (1 20:37 -0700) | ||
| committer | hhvm-bot <hhvm-bot@fb.com> | |
| Tue, 9 Jun 2015 04:02:11 +0000 (8 21:02 -0700) | ||
| tree | ceeeceb93bd69e550ee19edc9bd1c627d3795c17 | treesnapshot (tar.gz zip) |
| parent | c1f0d7c18d0fe42c45ef679e9eec106b8735ff32 | commitdiff |
Fix overflow in array_slice
Summary: Fixed a number of overflow issues with range checking, most notably,
((unsigned)offset + (unsigned)len) > (unsigned)num_in
Reviewed By: @alexmalyshev
Differential Revision: D2117760
Summary: Fixed a number of overflow issues with range checking, most notably,
((unsigned)offset + (unsigned)len) > (unsigned)num_in
Reviewed By: @alexmalyshev
Differential Revision: D2117760
| hphp/runtime/ext/array/ext_array.cpp | diffblobblamehistory | |
| hphp/runtime/ext/array/ext_array.h | diffblobblamehistory | |
| hphp/test/slow/ext_array/array_slice-overflow.php | [new file with mode: 0644] | blob |
| hphp/test/slow/ext_array/array_slice-overflow.php.expect | [new file with mode: 0644] | blob |