WS-2012-0020

In php-src, php-5.1.2RC1 to php-5.4.8 there is a buffer overflow vulnerability. “discardstate” array is 5 chars long although the buffer must be 6 chars long in order to include null char terminator...