File php-5.1.2-CVE-2007-1824.patch of Package php
--- main/streams/filter.c 2006/11/21 15:47:44 1.39
+++ main/streams/filter.c 2006/12/25 13:11:48 1.40
@@ -323,7 +323,8 @@
/* try a wildcard */
char *wildname;
- wildname = estrdup(filtername);
+ wildname = emalloc(n+3);
+ memcpy(wildname, filtername, n+1);
period = wildname + (period - filtername);
while (period && !filter) {
*period = '\0';