ext/bz2: bzcompress/bzdecompress check inputs lengths beforehand.

also removing useless casts for filter ZendMM parts.

Author: devnexen

ext/bz2/bz2.c

@@ -450,6 +450,13 @@ PHP_FUNCTION(bzcompress)
 		RETURN_THROWS();
 	}
 
+	const unsigned int source_len_max = (unsigned int)((UINT_MAX - 600) / 1.01);
+
+	if (source_len > source_len_max) {
+		zend_argument_value_error(1, "length must be lower or equal to %u", source_len_max);
+		RETURN_THROWS();
+	}
+
 	if (zblock_size < 1 || zblock_size > 9) {
 		zend_argument_value_error(2, "must be between 1 and 9");
 		RETURN_THROWS();
@@ -505,6 +512,11 @@ PHP_FUNCTION(bzdecompress)
 		RETURN_THROWS();
 	}
 
+	if (source_len > UINT_MAX) {
+		zend_argument_value_error(1, "length must be lower or equal to %u", UINT_MAX);
+		RETURN_THROWS();
+	}
+
 	bzs.bzalloc = NULL;
 	bzs.bzfree = NULL;
 

ext/bz2/bz2_filter.c

@@ -50,12 +50,12 @@ typedef struct _php_bz2_filter_data {
 
 static void *php_bz2_alloc(void *opaque, int items, int size)
 {
-	return (void *)safe_pemalloc(items, size, 0, ((php_bz2_filter_data*)opaque)->persistent);
+	return safe_pemalloc(items, size, 0, ((php_bz2_filter_data*)opaque)->persistent);
 }
 
 static void php_bz2_free(void *opaque, void *address)
 {
-	pefree((void *)address, ((php_bz2_filter_data*)opaque)->persistent);
+	pefree(address, ((php_bz2_filter_data*)opaque)->persistent);
 }
 /* }}} */