Commit 94ddf35ca90 for php.net

commit 94ddf35ca9006b0deea8f09c76308df9bf948bfd
Author: Julien Voisin <jvoisin@users.noreply.github.com>
Date:   Sat Sep 19 19:36:55 2026 +0200

    Fix an integer overflow in to_xml_hexbin (#23771)

diff --git a/ext/soap/php_encoding.c b/ext/soap/php_encoding.c
index 72de145e7b0..044d2058ec0 100644
--- a/ext/soap/php_encoding.c
+++ b/ext/soap/php_encoding.c
@@ -983,7 +983,7 @@ static xmlNodePtr to_xml_hexbin(encodeTypePtr type, zval *data, int style, xmlNo
 		ZVAL_STR(&tmp, get_serialization_string_from_zval(data));
 		data = &tmp;
 	}
-	str = (unsigned char *) safe_emalloc(Z_STRLEN_P(data) * 2, sizeof(char), 1);
+	str = (unsigned char *) safe_emalloc(Z_STRLEN_P(data), 2, 1);

 	for (i = j = 0; i < Z_STRLEN_P(data); i++) {
 		str[j++] = hexconvtab[((unsigned char)Z_STRVAL_P(data)[i]) >> 4];