File php-CVE-2016-7130.patch of Package php7.3356
Index: php-7.0.7/ext/wddx/wddx.c
===================================================================
--- php-7.0.7.orig/ext/wddx/wddx.c 2016-09-06 09:49:22.868053640 +0200
+++ php-7.0.7/ext/wddx/wddx.c 2016-09-06 09:54:12.408885755 +0200
@@ -891,7 +891,11 @@ static void php_wddx_pop_element(void *u
zend_string *new_str = php_base64_decode(
(unsigned char *)Z_STRVAL(ent1->data), Z_STRLEN(ent1->data));
zval_ptr_dtor(&ent1->data);
- ZVAL_STR(&ent1->data, new_str);
+ if (new_str) {
+ ZVAL_STR(&ent1->data, new_str);
+ } else {
+ ZVAL_EMPTY_STRING(&ent1->data);
+ }
}
/* Call __wakeup() method on the object. */