Ilia Alshanetsky · Ilia Alshanetsky · commit 678c532eee4f · 2007-12-03T14:13:45.000Z
MFB:  Fixed bug #43482 (array_pad() does not warn on very small pad
numbers).
diff --git a/ext/standard/array.c b/ext/standard/array.c
@@ -2684,6 +2684,11 @@ PHP_FUNCTION(array_pad)
 	/* Do some initial calculations */
 	input_size = zend_hash_num_elements(Z_ARRVAL_P(input));
 	pad_size_abs = abs(pad_size);
+	if (pad_size_abs < 0) {
+		php_error_docref(NULL TSRMLS_CC, E_WARNING, "You may only pad up to 1048576 elements at a time");
+		zval_dtor(return_value);
+		RETURN_FALSE;
+	}
 	do_pad = (input_size >= pad_size_abs) ? 0 : 1;
 
 	/* Copy the original array */
