Avoid potential integer overflow (php#18485)

ndossche · web-flow · commit 60e9fb5a1b99 · 2025-05-02T15:50:24.000+02:00
diff --git a/ext/intl/grapheme/grapheme_string.c b/ext/intl/grapheme/grapheme_string.c
@@ -1053,8 +1053,8 @@ PHP_FUNCTION(grapheme_levenshtein)
 	}
 
 	zend_long *p1, *p2, *tmp;
-	p1 = safe_emalloc(strlen_2 + 1, sizeof(zend_long), 0);
-	p2 = safe_emalloc(strlen_2 + 1, sizeof(zend_long), 0);
+	p1 = safe_emalloc((size_t) strlen_2 + 1, sizeof(zend_long), 0);
+	p2 = safe_emalloc((size_t) strlen_2 + 1, sizeof(zend_long), 0);
 
 	for (i2 = 0; i2 <= strlen_2; i2++) {
 		p1[i2] = i2 * cost_ins;

Original file line number	Diff line number	Diff line change
`@@ -1053,8 +1053,8 @@ PHP_FUNCTION(grapheme_levenshtein)`
`1053`	`1053`	`}`
`1054`	`1054`
`1055`	`1055`	`zend_long p1, p2, *tmp;`
`1056`		`- p1 = safe_emalloc(strlen_2 + 1, sizeof(zend_long), 0);`
`1057`		`- p2 = safe_emalloc(strlen_2 + 1, sizeof(zend_long), 0);`
	`1056`	`+ p1 = safe_emalloc((size_t) strlen_2 + 1, sizeof(zend_long), 0);`
	`1057`	`+ p2 = safe_emalloc((size_t) strlen_2 + 1, sizeof(zend_long), 0);`
`1058`	`1058`
`1059`	`1059`	`for (i2 = 0; i2 <= strlen_2; i2++) {`
`1060`	`1060`	`p1[i2] = i2 * cost_ins;`