Partially fix GH-17387

The length of the string should be set to the truncated length (that was
used to duplicate the input anyway).

Author: nielsdos

NEWS

@@ -9,6 +9,9 @@ PHP                                                                        NEWS
   . Fixed bug GH-17623 (Broken stack overflow detection for variable
     compilation). (ilutov)
 
+- PHPDBG:
+  . Partially fixed bug GH-17387 (Trivial crash in phpdbg lexer). (nielsdos)
+
 13 Feb 2025, PHP 8.3.17
 
 - Core:

sapi/phpdbg/phpdbg_lexer.l

@@ -160,8 +160,9 @@ INPUT       ("\\"[#"']|["]("\\\\"|"\\"["]|[^\n\000"])*["]|[']("\\"[']|"\\\\"|[^\
 
 <NORMAL>{GENERIC_ID} {
 	phpdbg_init_param(yylval, STR_PARAM);
-	yylval->str = estrndup(yytext, yyleng - unescape_string(yytext));
-	yylval->len = yyleng;
+	size_t len = yyleng - unescape_string(yytext);
+	yylval->str = estrndup(yytext, len);
+	yylval->len = len;
 	return T_ID;
 }