Commit 09c223d

committed

Fix leak when path is too long in ZipArchive::extractTo()

I did not find an easy way to trigger this branch without also triggering some other error conditions earlier. Closes GH-19002.

1 parent 11ea995 commit 09c223dCopy full SHA for 09c223d

File tree

-0

lines changed

-0

lines changed

Lines changed: 3 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -42,6 +42,9 @@ PHP NEWS`
`42`	`42`	`. Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter`
`43`	`43`	`fatal error). (Jakub Zelenka)`
`44`	`44`
	`45`	`+- Zip:`
	`46`	`+ . Fix leak when path is too long in ZipArchive::extractTo(). (nielsdos)`
	`47`	`+`
`45`	`48`	`03 Jul 2025, PHP 8.3.23`
`46`	`49`
`47`	`50`	`- Core:`

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -218,6 +218,7 @@ static int php_zip_extract_file(struct zip * za, char dest, const char file, s`
`218`	`218`	`return 0;`
`219`	`219`	`} else if (len > MAXPATHLEN) {`
`220`	`220`	`php_error_docref(NULL, E_WARNING, "Full extraction path exceed MAXPATHLEN (%i)", MAXPATHLEN);`
	`221`	`+ efree(fullpath);`
`221`	`222`	`efree(file_dirname_fullpath);`
`222`	`223`	`zend_string_release_ex(file_basename, 0);`
`223`	`224`	`CWD_STATE_FREE(new_state.cwd);`

Comments

(0)