https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4153 http://svn.php.net/viewvc?view=revision&revision=319442 --- php-5.3.3/ext/standard/syslog.c.cve4153 +++ php-5.3.3/ext/standard/syslog.c @@ -234,6 +234,9 @@ PHP_FUNCTION(openlog) free(BG(syslog_device)); } BG(syslog_device) = zend_strndup(ident, ident_len); + if(BG(syslog_device) == NULL) { + RETURN_FALSE; + } openlog(BG(syslog_device), option, facility); RETURN_TRUE; } --- php-5.3.3/Zend/zend_builtin_functions.c.cve4153 +++ php-5.3.3/Zend/zend_builtin_functions.c @@ -683,6 +683,9 @@ repeat: } c.flags = case_sensitive; /* non persistent */ c.name = zend_strndup(name, name_len); + if (c.name == NULL) { + RETURN_FALSE; + } c.name_len = name_len+1; c.module_number = PHP_USER_CONSTANT; if (zend_register_constant(&c TSRMLS_CC) == SUCCESS) {