Internet Bug Bounty: Write out-of-bounds at number_format

Upstream Bug --- https://bugs.php.net/bug.php?id=73240 Summary -- When the numberformat function receives decimals parameter and decpoint length parameter equal or close to 0x7fffffff, integer overflow occurs in reslen variable, this causes a write heap overflow. USEZENDALLOC=0...