Internet Bug Bounty: Out of bound when verify signature of zip phar in phar_parse_zipfile

https://bugs.php.net/bug.php?id=72928 There was a security code in pharparsezipfile sig = char emallocentry.uncompressedfilesize; read = phpstreamreadfp, sig, entry.uncompressedfilesize; if read != entry.uncompressedfilesize phpstreamclosesigfile; efreesig; PHARZIPFAIL"signature cannot be read";...