File php-5.2.14-CVE-2010-3709.patch of Package php5

--- ext/zip/php_zip.c	2010/01/03 09:23:27	293036
+++ ext/zip/php_zip.c	2010/10/19 09:55:36	304505
@@ -1954,6 +1954,9 @@
 
 	PHP_ZIP_STAT_INDEX(intern, index, 0, sb);
 	comment = zip_get_file_comment(intern, index, &comment_len, (int)flags);
+	if(comment==NULL) {
+		RETURN_FALSE;
+	}
 	RETURN_STRINGL((char *)comment, (long)comment_len, 1);
 }
 /* }}} */

openSUSE Build Service is sponsored by