From ca3be84076521c4bb053511775c94c0b195aeac8 Mon Sep 17 00:00:00 2001 From: kkadosh Date: Thu, 28 Jun 2018 21:43:40 +0000 Subject: Better handling of filters for builtins --- src/sp_crypt.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'src/sp_crypt.c') diff --git a/src/sp_crypt.c b/src/sp_crypt.c index 55ae37b..6a46d06 100644 --- a/src/sp_crypt.c +++ b/src/sp_crypt.c @@ -64,9 +64,9 @@ int decrypt_zval(zval *pDest, bool simulation, zend_hash_key *hash_key) { } } - - if (ZSTR_LEN(debase64) + (size_t)crypto_secretbox_ZEROBYTES < ZSTR_LEN(debase64)) { - if (true == simulation) { + if (ZSTR_LEN(debase64) + (size_t)crypto_secretbox_ZEROBYTES < + ZSTR_LEN(debase64)) { + if (true == simulation) { sp_log_msg( "cookie_encryption", SP_LOG_SIMULATION, "Integer overflow tentative detected in cookie encryption handling " -- cgit v1.3