Bug #12988 ยป 0001-Stop-reading-past-the-end-of-ivptr-array.patch
| variable.c | ||
|---|---|---|
|
switch (BUILTIN_TYPE(obj)) {
|
||
|
case T_OBJECT:
|
||
|
if ((tbl = ROBJECT_IV_INDEX_TBL(obj)) != 0) {
|
||
|
st_index_t i, count, num = tbl->num_entries;
|
||
|
st_index_t i, count, num = ROBJECT_NUMIV(obj);
|
||
|
const VALUE *const ivptr = ROBJECT_IVPTR(obj);
|
||
|
for (i = count = 0; i < num; ++i) {
|
||
|
if (ivptr[i] != Qundef) {
|
||