File php-5.3.3-CVE-2011-1092.patch of Package php5
http://svn.php.net/viewvc/?view=revision&revision=309018
--- ext/shmop/shmop.c 2011/03/08 12:58:22 309017
+++ ext/shmop/shmop.c 2011/03/08 13:11:14 309018
@@ -256,7 +256,7 @@
RETURN_FALSE;
}
- if (start + count > shmop->size || count < 0) {
+ if (count < 0 || start > (INT_MAX - count) || start + count > shmop->size) {
php_error_docref(NULL TSRMLS_CC, E_WARNING, "count is out of range");
RETURN_FALSE;
}