File php-5.2.14-CVE-2010-3709.patch of Package php5
--- ext/zip/php_zip.c 2010/01/03 09:23:27 293036
+++ ext/zip/php_zip.c 2010/10/19 09:55:36 304505
@@ -1954,6 +1954,9 @@
PHP_ZIP_STAT_INDEX(intern, index, 0, sb);
comment = zip_get_file_comment(intern, index, &comment_len, (int)flags);
+ if(comment==NULL) {
+ RETURN_FALSE;
+ }
RETURN_STRINGL((char *)comment, (long)comment_len, 1);
}
/* }}} */