[GIT-PULLS] [php-src] PR #23416: Fix unbounded write on negative star precision in format_converter

[email protected] (iliaal)
Newsgroups php.git-pulls
Message-ID <[email protected]> 
Pull Request: https://github.com/php/php-src/pull/23416
Author: iliaal

A negative star precision was only clamped to -1, so FIX_PRECISION() treated it as SIZE_MAX and wrote backwards through the buffer. Treat omitted precision that way in format_converter() only. xbuf_format_converter() keeps -1 as the %H shortest-float sentinel used by serialize_precision.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.