From: Remi Collet Date: Thu, 10 Nov 2016 09:33:25 +0100 Subject: fix Invalid write of size 1 --- ssh2-1.0/ssh2_fopen_wrappers.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ssh2-1.0/ssh2_fopen_wrappers.c b/ssh2-1.0/ssh2_fopen_wrappers.c index f01a9e3..527da4a 100644 --- a/ssh2-1.0/ssh2_fopen_wrappers.c +++ b/ssh2-1.0/ssh2_fopen_wrappers.c @@ -220,7 +220,8 @@ php_url *php_ssh2_fopen_wraper_parse_path(const char *path, char *type, php_stre if (h) { /* Starting with 5.6.28, 7.0.13 need to be clean, else php_url_parse will fail */ char *tmp = estrdup(path); - strncpy(tmp + (h-path), h + sizeof("Resource id #")-1, strlen(tmp)); + + strncpy(tmp + (h-path), h + sizeof("Resource id #")-1, strlen(tmp)-sizeof("Resource id #")); resource = php_url_parse(tmp); efree(tmp); } else {