Internet Bug Bounty: Heap overflow due to integer overflow in bzdecompress() function

The fix for this bug has been committed: https://bugs.php.net/bug.php?id=73386 Description: ------------ I have found some vulnerable code at bzdecompress function in module Bzip2. bzdecompress function creates a new zendstring object to store decompressed data. The size of destination string...