diff --git a/hphp/runtime/base/util/string_buffer.cpp b/hphp/runtime/base/util/string_buffer.cpp index 762b0949a..e0c7f525a 100644 --- a/hphp/runtime/base/util/string_buffer.cpp +++ b/hphp/runtime/base/util/string_buffer.cpp @@ -150,8 +150,8 @@ void StringBuffer::release() { } void StringBuffer::resize(int size) { - assert(size >= 0 && size < m_cap); - if (size >= 0 && size < m_cap) { + assert(size >= 0 && size <= m_cap); + if (size >= 0 && size <= m_cap) { m_len = size; } } diff --git a/hphp/test/vm/sb_overflow.php b/hphp/test/vm/sb_overflow.php new file mode 100644 index 000000000..03dfeb087 --- /dev/null +++ b/hphp/test/vm/sb_overflow.php @@ -0,0 +1,8 @@ +