Fix safe_erealloc() call

tstarling · tstarling · commit d684590f628c · 2026-02-26T09:56:33.000+11:00
diff --git a/ext/zip/php_zip.c b/ext/zip/php_zip.c
@@ -579,7 +579,7 @@ static char * php_zipobj_get_zip_comment(ze_zip_object *obj, int *len) /* {{{ */
 static void php_zipobj_add_buffer(ze_zip_object *obj, zend_string *str) /* {{{ */
 {
 	size_t pos = obj->buffers_cnt++;
-	obj->buffers = safe_erealloc(obj->buffers, sizeof(*obj->buffers), pos, 0);
+	obj->buffers = safe_erealloc(obj->buffers, sizeof(*obj->buffers), obj->buffers_cnt, 0);
 	obj->buffers[pos] = zend_string_copy(str);
 }
 /* }}} */

Original file line number	Diff line number	Diff line change
`@@ -579,7 +579,7 @@ static char * php_zipobj_get_zip_comment(ze_zip_object obj, int len) /* {{{ */`
`579`	`579`	`static void php_zipobj_add_buffer(ze_zip_object obj, zend_string str) /* {{{ */`
`580`	`580`	`{`
`581`	`581`	`size_t pos = obj->buffers_cnt++;`
`582`		`- obj->buffers = safe_erealloc(obj->buffers, sizeof(*obj->buffers), pos, 0);`
	`582`	`+ obj->buffers = safe_erealloc(obj->buffers, sizeof(*obj->buffers), obj->buffers_cnt, 0);`
`583`	`583`	`obj->buffers[pos] = zend_string_copy(str);`
`584`	`584`	`}`
`585`	`585`	`/* }}} */`