Memory corruption via ldap_escape length overflow

Integer overflow in PHP 8.1.30 and earlier, 8.2.25 and earlier, or 8.3.13 and earlier allows attackers to corrupt memory on 32-bit systems. The php_ldap_do_escape helper adds one or three bytes per input byte to a size_t output-length counter without checking ZSTR_MAX_LEN, so the count wraps and allocation is undersized. Exploitation requires an application to pass an attacker-controlled string of roughly 1.4 GB to the LDAP extension; the established consequence is memory corruption, not demonstrated code execution.