From 6ea4225d69082afa0a9d4e35dd21ae6945713ad2 Mon Sep 17 00:00:00 2001 From: Saki Takamachi Date: Thu, 1 May 2025 22:07:40 +0900 Subject: [PATCH] Fix for the issue where strlen could potentially become negative --- ext/intl/grapheme/grapheme_string.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/ext/intl/grapheme/grapheme_string.c b/ext/intl/grapheme/grapheme_string.c index 9bc7796cc35f6..16549f6ece585 100644 --- a/ext/intl/grapheme/grapheme_string.c +++ b/ext/intl/grapheme/grapheme_string.c @@ -994,6 +994,10 @@ PHP_FUNCTION(grapheme_levenshtein) int32_t strlen_1, strlen_2; strlen_1 = grapheme_split_string(ustring1, ustring1_len, NULL, 0); strlen_2 = grapheme_split_string(ustring2, ustring2_len, NULL, 0); + if (UNEXPECTED(strlen_1 < 0 || strlen_2 < 0)) { + RETVAL_FALSE; + goto out_ustring2; + } if (strlen_1 == 0) { RETVAL_LONG(strlen_2 * cost_ins);