Commit 15163debc56 for php.net
commit 15163debc565d5d0aacdf15b713c5b9bbee32702
Merge: 6c8a71b3b7d b6495c189af
Author: David Carlier <devnexen@gmail.com>
Date: Sun Feb 15 21:54:54 2026 +0000
Merge branch 'PHP-8.4' into PHP-8.5
* PHP-8.4:
ext/sockets: socket_sendto() add max addr length control for AF_UNIX.
diff --cc ext/sockets/sockets.c
index 6fb75e2db1d,79d5f77856d..86b7f046945
--- a/ext/sockets/sockets.c
+++ b/ext/sockets/sockets.c
@@@ -1716,8 -1584,14 +1716,14 @@@ PHP_FUNCTION(socket_sendto
switch (php_sock->type) {
case AF_UNIX:
memset(&s_un, 0, sizeof(s_un));
+
+ if (addr_len >= sizeof(s_un.sun_path)) {
+ zend_argument_value_error(5, "must be less than %d", sizeof(s_un.sun_path));
+ RETURN_THROWS();
+ }
+
s_un.sun_family = AF_UNIX;
- snprintf(s_un.sun_path, sizeof(s_un.sun_path), "%s", addr);
+ snprintf(s_un.sun_path, sizeof(s_un.sun_path), "%s", ZSTR_VAL(addr));
retval = sendto(php_sock->bsd_socket, buf, ((size_t)len > buf_len) ? buf_len : (size_t)len, flags, (struct sockaddr *) &s_un, SUN_LEN(&s_un));
break;