Heap overflow due to integer overflow in pg_escape_string() function

The fix for this bug has been committed: https://bugs.php.net/bug.php?id=73399 Description: ------------ I have found some vulnerable code at `pg_escape_string()` function in module PostgreSQL. `pg_escape_string()` function creates a new zend_string object to store escaped string. The size of …

PHP_FUNCTION(pg_escape_string)
{
...
    zend_string *from = NULL, *to = NULL;
   
....
	to = zend_string_alloc(ZSTR_LEN(from) * 2, 0);
...
}