clones/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2024-09-22 18:37:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'PHP-7.3'

Browse Source 
* PHP-7.3:
  Update NEWS
  Fixed bug #77395 (segfault about array_multisort)
This commit is contained in:
Xinchen Hui 2019-01-02 12:10:41 +08:00
commit c5c76fbd61
2 changed files with 21 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
ext/standard/array.c
View File

@ -5604,7 +5604,7 @@ PHPAPI int php_multisort_compare(const void *a, const void *b) /* {{{ */
/* }}} */
#define MULTISORT_ABORT \
efree(ARRAYG(multisort_func)); \
efree(func); \
efree(arrays); \
RETURN_FALSE;
@ -5636,6 +5636,7 @@ PHP_FUNCTION(array_multisort)
int sort_order = PHP_SORT_ASC;
int sort_type = PHP_SORT_REGULAR;
int i, k, n;
compare_func_t *func;
ZEND_PARSE_PARAMETERS_START(1, -1)
Z_PARAM_VARIADIC('+', args, argc)
@ -5646,7 +5647,7 @@ PHP_FUNCTION(array_multisort)
for (i = 0; i < MULTISORT_LAST; i++) {
parse_state[i] = 0;
}
ARRAYG(multisort_func) = (compare_func_t*)ecalloc(argc, sizeof(compare_func_t));
func = ARRAYG(multisort_func) = (compare_func_t*)ecalloc(argc, sizeof(compare_func_t));
/* Here we go through the input arguments and parse them. Each one can
* be either an array or a sort flag which follows an array. If not
@ -5730,7 +5731,7 @@ PHP_FUNCTION(array_multisort)
/* If all arrays are empty we don't need to do anything. */
if (array_size < 1) {
efree(ARRAYG(multisort_func));
efree(func);
efree(arrays);
RETURN_TRUE;
}
@ -5789,7 +5790,7 @@ PHP_FUNCTION(array_multisort)
efree(indirect[i]);
}
efree(indirect);
efree(ARRAYG(multisort_func));
efree(func);
efree(arrays);
RETURN_TRUE;
}

16
ext/standard/tests/array/bug77395.phpt Normal file
View File

@ -0,0 +1,16 @@
--TEST--
Bug #77395 (segfault about array_multisort)
--FILE--
<?php
function error_handle($level, $message, $file = '', $line = 0){
$a = [1,2,3];
$b = [3,2,1];
echo $message;
array_multisort($a, SORT_ASC, $b); // if comment this line, no segfault happen
}
set_error_handler('error_handle');
$data = [['aa'=> 'bb',], ['aa'=> 'bb',],];
array_multisort(array_column($data, 'bb'),SORT_DESC, $data); // PHP Warning error
?>
--EXPECT--
array_multisort(): Array sizes are inconsistent