From a925690bb54fbfb30933f7090f646ce05b9d2c80 Mon Sep 17 00:00:00 2001
From: xXx-caillou-xXx
Date: Thu, 19 Jul 2018 14:57:21 +0200
Subject: Fix the issue with rand hardening

---
 src/sp_harden_rand.c                |  2 +-
 src/tests/harden_mt_rand_range.phpt | 16 ++++++++++++++++
 2 files changed, 17 insertions(+), 1 deletion(-)
 create mode 100644 src/tests/harden_mt_rand_range.phpt

(limited to 'src')

diff --git a/src/sp_harden_rand.c b/src/sp_harden_rand.c
index 0cb3058..ca0503b 100644
--- a/src/sp_harden_rand.c
+++ b/src/sp_harden_rand.c
@@ -32,7 +32,7 @@ static void random_int_wrapper(INTERNAL_FUNCTION_PARAMETERS) {
       break;
     case 2:
     default:
-      ZEND_PARSE_PARAMETERS_START_EX(ZEND_PARSE_PARAMS_QUIET, 0, 2);
+      ZEND_PARSE_PARAMETERS_START_EX(ZEND_PARSE_PARAMS_QUIET, 2, 2);
       Z_PARAM_LONG(min);
       Z_PARAM_LONG(max);
       ZEND_PARSE_PARAMETERS_END_EX((void)0);
diff --git a/src/tests/harden_mt_rand_range.phpt b/src/tests/harden_mt_rand_range.phpt
new file mode 100644
index 0000000..0d5a5bf
--- /dev/null
+++ b/src/tests/harden_mt_rand_range.phpt
@@ -0,0 +1,16 @@
+--TEST--
+Harden mt_rand range
+--SKIPIF--
+<?php if (!extension_loaded("snuffleupagus")) print "skip"; ?>
+--INI--
+sp.configuration_file={PWD}/config/harden_rand.ini
+--FILE--
+<?php 
+for ($i=0; $i <=100; $i++) {
+  if (mt_rand(0,1) > 1) {
+    echo "Failed\n";
+  }
+}
+
+?>
+--EXPECT--
-- 
cgit v1.3