1 CVE-2015-0232

     2 Community BUG:

     3 https://bugs.php.net/bug.php?id=68799

     4 Community CODE:

     5 http://git.php.net/?p=php-src.git;a=commit;h=55001de6d8c6ed2aada870a76de1e4b4558737bf 

     6 This patch was created from the community reports above.

     7 

     8 

     9 --- php-5.3.29/ext/exif/exif.c_orig	2015-06-14 15:28:49.975351692 -0700

    10 +++ php-5.3.29/ext/exif/exif.c	2015-06-14 15:29:28.860406969 -0700

    11 @@ -2722,7 +2722,7 @@

    12  static int exif_process_unicode(image_info_type *ImageInfo, xp_field_type *xp_field, int tag, char *szValuePtr, int ByteCount TSRMLS_DC)

    13  {

    14  	xp_field->tag = tag;	

    15 -

    16 +	xp_field->value = NULL;

    17  	/* Copy the comment */

    18  #if EXIF_USE_MBSTRING

    19  /*  What if MS supports big-endian with XP? */