Description:
------------
Buffer overflow flaw found in /php-5.3.8/ext/ereg/regex/split.c

Test script:
---------------
from line 150 to line 170 
---snip snip ---

int
main(argc, argv)
int argc;
char *argv[];
{
	char buf[512];
	register int n;
#	define	MNF	10
	char *fields[MNF];

	if (argc > 4)
		for (n = atoi(argv[3]); n > 0; n--) {
			(void) strcpy(buf, argv[1]); //<--buffer overflow occurs if lenght(argv[1])>512 bytes
		}
	else if (argc > 3)
		for (n = atoi(argv[3]); n > 0; n--) {
			(void) strcpy(buf, argv[1]);//<--buffer overflow occurs if lenght(argv[1])>512 bytes
			(void) split(buf, fields, MNF, argv[2]);
		}
	else if (argc > 2)
		dosplit(argv[1], argv[2]);
---snip snip ---