File php-CVE-2018-10360.patch of Package php5.16119

Index: php-5.5.14/ext/fileinfo/libmagic/readelf.c
===================================================================
--- php-5.5.14.orig/ext/fileinfo/libmagic/readelf.c	2014-06-25 15:06:23.000000000 +0200
+++ php-5.5.14/ext/fileinfo/libmagic/readelf.c	2018-06-12 12:16:55.564688675 +0200
@@ -774,7 +774,8 @@ core:
 
 				cname = (unsigned char *)
 				    &nbuf[doff + prpsoffsets(i)];
-				for (cp = cname; *cp && isprint(*cp); cp++)
+				for (cp = cname; cp < nbuf + size && *cp
+				    && isprint(*cp); cp++)
 					continue;
 				/*
 				 * Linux apparently appends a space at the end
openSUSE Build Service is sponsored by