/PHP-7.0/ext/opcache/tests/ |
H A D | bug71843.phpt | 2 Bug #71843 (null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER (zend_vm_execute.h:3479))
|
/PHP-7.0/ext/xsl/ |
H A D | xsltprocessor.c | 280 node = xmlDocCopyNodeList(domintern->document->ptr, node); in xsl_ext_function_php() 464 if ((oldsheetp = (xsltStylesheetPtr)intern->ptr)) { in PHP_FUNCTION() 466 if (((xsltStylesheetPtr) intern->ptr)->_private != NULL) { in PHP_FUNCTION() 467 ((xsltStylesheetPtr) intern->ptr)->_private = NULL; in PHP_FUNCTION() 469 xsltFreeStylesheet((xsltStylesheetPtr) intern->ptr); in PHP_FUNCTION() 470 intern->ptr = NULL; in PHP_FUNCTION() 635 sheetp = (xsltStylesheetPtr) intern->ptr; in PHP_FUNCTION() 692 sheetp = (xsltStylesheetPtr) intern->ptr; in PHP_FUNCTION() 724 sheetp = (xsltStylesheetPtr) intern->ptr; in PHP_FUNCTION()
|
H A D | php_xsl.h | 60 void *ptr; member
|
/PHP-7.0/ext/pcre/pcrelib/sljit/ |
H A D | sljitNativeARM_32.c | 169 sljit_uw* ptr; in push_inst() local 175 FAIL_IF(!ptr); in push_inst() 177 *ptr = inst; in push_inst() 183 sljit_uw* ptr; in push_inst_with_literal() local 220 FAIL_IF(!ptr); in push_inst_with_literal() 233 sljit_uw* ptr; in push_inst_with_unique_literal() local 239 FAIL_IF(!ptr); in push_inst_with_unique_literal() 375 sljit_uw* ptr; in push_inst() local 378 FAIL_IF(!ptr); in push_inst() 380 *ptr = inst; in push_inst() [all …]
|
/PHP-7.0/sapi/cgi/ |
H A D | cgi_main.c | 317 ptr += ret; in sapi_cgi_ub_write() 338 ptr += ret; in sapi_fcgi_ub_write() 736 char *ptr; local 789 while ((ptr = strchr(ptr, DEFAULT_SLASH)) != NULL) { 790 *ptr = 0; 792 *ptr = '/'; 793 ptr++; 1222 char *ptr; local 1224 while ((ptr = strrchr(pt, '/')) || (ptr = strrchr(pt, '\\'))) { 1225 *ptr = 0; [all …]
|
/PHP-7.0/ext/dom/ |
H A D | php_dom.h | 139 if (__intern->ptr == NULL || !(__ptr = (__prtype)((php_libxml_node_ptr *)__intern->ptr)->node)) { \
|
H A D | php_dom.c | 267 if (obj && obj->ptr != NULL) { in dom_object_get_node() 268 return ((php_libxml_node_ptr *)obj->ptr)->node; in dom_object_get_node() 1014 if (intern->dom.ptr != NULL) { in dom_xpath_objects_free_storage() 1015 xmlXPathFreeContext((xmlXPathContextPtr) intern->dom.ptr); in dom_xpath_objects_free_storage() 1044 if (intern->ptr != NULL && ((php_libxml_node_ptr *)intern->ptr)->node != NULL) { in dom_objects_free_storage() 1051 intern->ptr = NULL; in dom_objects_free_storage() 1058 dom_nnodemap_object *mapptr = (dom_nnodemap_object *) intern->ptr; in dom_namednode_iter() 1128 objmap = (dom_nnodemap_object *)intern->ptr; in dom_nnodemap_object_dtor() 1141 intern->ptr = NULL; in dom_nnodemap_object_dtor() 1162 intern->ptr = emalloc(sizeof(dom_nnodemap_object)); in dom_nnodemap_objects_new() [all …]
|
/PHP-7.0/main/ |
H A D | php_ini.c | 807 char *ptr; local 831 ptr = path + 1; 832 while ((ptr = strchr(ptr, '/')) != NULL) { 833 *ptr = 0; 838 *ptr = '/'; 839 ptr++;
|
/PHP-7.0/Zend/tests/ |
H A D | bug70895.phpt | 2 Bug #70895 null ptr deref and segfault with crafted callable
|
H A D | bug70898.phpt | 2 Bug #70895 null ptr deref and segfault with crafted callable
|
H A D | bug70124.phpt | 2 Bug #70124 (null ptr deref / seg fault in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER)
|
/PHP-7.0/main/streams/ |
H A D | streams.c | 77 stream = (php_stream*)rsrc->ptr; in forget_persistent_resource_id_numbers() 120 *stream = (php_stream*)le->ptr; in php_stream_from_persistent_id() 122 if (regentry->ptr == le->ptr) { in php_stream_from_persistent_id() 357 return le->ptr == pStream; in _php_stream_free_persistent() 1422 char *ptr; in _php_stream_copy_to_mem() local 1439 ptr = ZSTR_VAL(result); in _php_stream_copy_to_mem() 1446 ptr += ret; in _php_stream_copy_to_mem() 1449 *ptr = '\0'; in _php_stream_copy_to_mem() 1471 ptr = ZSTR_VAL(result); in _php_stream_copy_to_mem() 1478 ptr = ZSTR_VAL(result) + len; in _php_stream_copy_to_mem() [all …]
|
/PHP-7.0/sapi/phpdbg/ |
H A D | phpdbg_sigsafe.c | 27 static void zend_mm_mem_free(zend_mm_storage *storage, void *ptr, size_t size) { in zend_mm_mem_free() argument
|
/PHP-7.0/Zend/ |
H A D | zend_virtual_cwd.c | 1877 char *ptr, *dir; in virtual_popen() local 1897 ptr += sizeof("cd ")-1; in virtual_popen() 1902 *ptr++ = '\''; in virtual_popen() 1906 *ptr++ = '\''; in virtual_popen() 1907 *ptr++ = '\\'; in virtual_popen() 1908 *ptr++ = '\''; in virtual_popen() 1911 *ptr++ = *dir; in virtual_popen() 1916 *ptr++ = '\''; in virtual_popen() 1919 *ptr++ = ' '; in virtual_popen() 1920 *ptr++ = ';'; in virtual_popen() [all …]
|
H A D | zend_operators.c | 2856 const char *ptr; local 2877 ptr = str; 2879 if (*ptr == '-') { 2881 ptr++; 2882 } else if (*ptr == '+') { 2883 ptr++; 2888 while (*ptr == '0') { 2889 ptr++; 2902 } else if ((*ptr == 'e' || *ptr == 'E') && dp_or_e < 2) { 2906 ptr = e++; [all …]
|
H A D | zend_types.h | 112 void *ptr; member 262 #define HT_SET_DATA_ADDR(ht, ptr) do { \ argument 263 (ht)->arData = (Bucket*)(((char*)(ptr)) + HT_HASH_SIZE((ht)->nTableMask)); \ 288 void *ptr; member 560 #define Z_RES_VAL(zval) Z_RES(zval)->ptr 584 #define Z_PTR(zval) (zval).value.ptr 699 _res->ptr = (p); \ 713 _res->ptr = (p); \
|
/PHP-7.0/ext/ftp/ |
H A D | php_ftp.c | 305 ftpbuf_t *ftp = (ftpbuf_t *)rsrc->ptr; in ZEND_GET_MODULE() 700 char **nlist, **ptr, *dir; in PHP_FUNCTION() local 717 for (ptr = nlist; *ptr; ptr++) { in PHP_FUNCTION() 718 add_next_index_string(return_value, *ptr); in PHP_FUNCTION() 730 char **llist, **ptr, *dir; in PHP_FUNCTION() local 748 for (ptr = llist; *ptr; ptr++) { in PHP_FUNCTION() 749 add_next_index_string(return_value, *ptr); in PHP_FUNCTION()
|
/PHP-7.0/ext/phar/ |
H A D | phar.c | 2094 char *ptr; local 2108 ptr = path; 2110 if (*ptr == '/') { 2111 ++ptr; 2114 tok = ptr; 2117 ptr = memchr(ptr, '/', path_length - (ptr - path)); 2118 } while (ptr && ptr - tok == 0 && *ptr == '/' && ++ptr && ++tok); 2142 while (ptr) { 2172 tok = ++ptr; 2175 ptr = memchr(ptr, '/', path_length - (ptr - path)); [all …]
|
/PHP-7.0/ext/standard/ |
H A D | streamsfuncs.c | 827 char *xmsg, int xcode, size_t bytes_sofar, size_t bytes_max, void * ptr) in user_space_stream_notifier() argument 829 zval *callback = &context->notifier->ptr; in user_space_stream_notifier() 856 if (notifier && Z_TYPE(notifier->ptr) != IS_UNDEF) { in user_space_stream_notifier_dtor() 857 zval_ptr_dtor(¬ifier->ptr); in user_space_stream_notifier_dtor() 858 ZVAL_UNDEF(¬ifier->ptr); in user_space_stream_notifier_dtor() 898 ZVAL_COPY(&context->notifier->ptr, tmp); in parse_context_params() 1048 …if (context->notifier && Z_TYPE(context->notifier->ptr) != IS_UNDEF && context->notifier->func == … in PHP_FUNCTION() 1049 …add_assoc_zval_ex(return_value, "notification", sizeof("notification")-1, &context->notifier->ptr); in PHP_FUNCTION() 1050 if (Z_REFCOUNTED(context->notifier->ptr)) Z_ADDREF(context->notifier->ptr); in PHP_FUNCTION()
|
/PHP-7.0/ext/date/lib/ |
H A D | timelib.h | 124 timelib_long timelib_parse_zone(char **ptr, int *dst, timelib_time *t, int *tz_not_found, const tim… 153 timelib_long timelib_parse_tz_cor(char **ptr);
|
/PHP-7.0/ext/oci8/ |
H A D | oci8.c | 1805 connection = (php_oci_connection *)le->ptr; in php_oci_do_connect_ex() 1811 zend_resource *ptr; in php_oci_do_connect_ex() local 1813 ptr = (zend_resource *) le->ptr; in php_oci_do_connect_ex() 1814 if (ptr && (ptr->type == le_connection)) { in php_oci_do_connect_ex() 1815 connection = (php_oci_connection *)ptr->ptr; in php_oci_do_connect_ex() 1918 if (connection == connection->id->ptr) { in php_oci_do_connect_ex() 1919 le->ptr = NULL; in php_oci_do_connect_ex() 2044 new_le.ptr = connection; in php_oci_do_connect_ex() 2061 new_le.ptr = connection->id; in php_oci_do_connect_ex() 2709 connection = (php_oci_connection *)le->ptr; in php_oci_persistent_helper() [all …]
|
/PHP-7.0/ext/pdo_dblib/ |
H A D | dblib_stmt.c | 255 static int pdo_dblib_stmt_get_col(pdo_stmt_t *stmt, int colno, char **ptr, argument 428 *ptr = (char*)zv; 431 *ptr = NULL;
|
/PHP-7.0/ext/fileinfo/libmagic/ |
H A D | compress.c | 264 char *ptr = mktemp(buf); in file_pipe2file() local 265 tfd = open(ptr, O_RDWR|O_TRUNC|O_EXCL|O_CREAT, 0600); in file_pipe2file() 267 (void)unlink(ptr); in file_pipe2file()
|
/PHP-7.0/ext/opcache/ |
H A D | zend_accelerator_util_funcs.c | 37 #define ARENA_REALLOC(ptr) \ argument 38 …(void*)(((char*)(ptr)) + ((char*)ZCG(arena_mem) - (char*)ZCG(current_persistent_script)->arena_mem… 157 void *ptr; in zend_clone_zval() local 160 ptr = accel_xlat_get(Z_REF_P(src)); in zend_clone_zval() 161 if (ptr != NULL) { in zend_clone_zval() 162 Z_REF_P(src) = ptr; in zend_clone_zval() 173 if (Z_REFCOUNT_P(src) > 1 && (ptr = accel_xlat_get(Z_AST_P(src))) != NULL) { in zend_clone_zval() 174 Z_AST_P(src) = ptr; in zend_clone_zval()
|
/PHP-7.0/ext/gd/libgd/ |
H A D | gd_topal.c | 352 register JSAMPROW ptr; local 366 ptr = input_buf[row]; 370 int r = GETJSAMPLE (ptr[0]) >> C0_SHIFT; 371 int g = GETJSAMPLE (ptr[1]) >> C1_SHIFT; 372 int b = GETJSAMPLE (ptr[2]) >> C2_SHIFT; 374 int r = gdTrueColorGetRed (*ptr) >> C0_SHIFT; 375 int g = gdTrueColorGetGreen (*ptr) >> C1_SHIFT; 376 int b = gdTrueColorGetBlue (*ptr) >> C2_SHIFT; 381 ptr++; 391 ptr += 3; [all …]
|