[GIT-PULLS] [php-src] PR #23482: Fix sparse set allocation size overflow
[email protected] (crystarm)
| Newsgroups | php.git-pulls |
|---|---|
| Message-ID | <[email protected]> |
Pull Request: https://github.com/php/php-src/pull/23482 Author: crystarm Fixes an integer-overflow risk when calculating the allocation size for IR sparse sets. Uses `ir_mem_calloc(size, 2 * sizeof(*set->data))` so the allocator performs the checked multiplication, while preserving the existing sparse/dense memory layout. The issue was detected by static analysis: [BAD_ALLOC_ARITHMETIC ir_private.h:[500:14].log](https://github.com/user-attachments/files/31518404/BAD_ALLOC_ARITHMETIC.ir_private.h.500.14.log)