File php-unserialize-null-ptr-deref.patch of Package php5

http://git.php.net/?p=php-src.git;a=commitdiff;h=13f1c276ab72cf1a8a400fd013b9289d0018a340
Index: ext/standard/var_unserializer.re
===================================================================
--- ext/standard/var_unserializer.re.orig	2014-12-30 09:31:06.509843894 +0100
+++ ext/standard/var_unserializer.re	2014-12-30 09:32:36.810979870 +0100
@@ -58,7 +58,13 @@
 
 PHPAPI void var_push_dtor(php_unserialize_data_t *var_hashx, zval **rval)
 {
-	var_entries *var_hash = (*var_hashx)->last_dtor;
+       var_entries *var_hash;
+
+       if (!var_hashx || !*var_hashx) {
+               return;
+       }
+
+       var_hash = (*var_hashx)->last_dtor;
 #if VAR_ENTRIES_DBG
 	fprintf(stderr, "var_push_dtor(%ld): %d\n", var_hash?var_hash->used_slots:-1L, Z_TYPE_PP(rval));
 #endif
openSUSE Build Service is sponsored by