Skip to content

Fix GH-23106 / GH-25025: Clamp pos in offset_to_pointer_utf8 to prevent out-of-bounds read on truncated UTF-8 - #25167

Closed
AdamMagued wants to merge 1 commit into
php:PHP-8.3from
AdamMagued:fix-issue-25025-php83-mbstring-clamp
Closed

Fix GH-23106 / GH-25025: Clamp pos in offset_to_pointer_utf8 to prevent out-of-bounds read on truncated UTF-8#25167
AdamMagued wants to merge 1 commit into
php:PHP-8.3from
AdamMagued:fix-issue-25025-php83-mbstring-clamp

Fix GH-23106 / GH-25025: mb_strpos() reads past truncated UTF-8 haystack

cd33ed2
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 notice
triage
succeeded Nov 2, 2026 in 18s