File php-CVE-2016-5114.patch of Package php5

Index: php-5.6.1/sapi/fpm/fpm/fpm_log.c
===================================================================
--- php-5.6.1.orig/sapi/fpm/fpm/fpm_log.c	2016-06-01 11:15:40.341622336 +0200
+++ php-5.6.1/sapi/fpm/fpm/fpm_log.c	2016-06-01 11:16:30.910433320 +0200
@@ -446,6 +446,11 @@ int fpm_log_write(char *log_format TSRML
 				b += len2;
 				len += len2;
 			}
+                       if (len >= FPM_LOG_BUFFER) {
+                               zlog(ZLOG_NOTICE, "the log buffer is full (%d). The access log request has been truncated.", FPM_LOG_BUFFER);
+                               len = FPM_LOG_BUFFER;
+                               break;
+                       }
 			continue;
 		}
 
openSUSE Build Service is sponsored by