diff options
| author | Stanislav Malyshev <stas@php.net> | 2019-09-23 21:51:12 -0700 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2019-09-23 21:51:12 -0700 |
| commit | e7befd38d4fc0a599d5b33b340bc7244458aee01 (patch) | |
| tree | 3f59182d5f687914ba66b89548667eb8868e62f6 | |
| parent | 6bdde5d4799a0d5a28fe54ce288f87fb8ab78355 (diff) | |
| parent | 8f949eba8083e34d181c30bcf11aaeef2496bb97 (diff) | |
| download | php-git-e7befd38d4fc0a599d5b33b340bc7244458aee01.tar.gz | |
Merge branch 'PHP-7.3' into PHP-7.4
* PHP-7.3:
Fix #78559: Heap buffer overflow in mb_eregi
| -rw-r--r-- | ext/mbstring/tests/bug78559.phpt | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/ext/mbstring/tests/bug78559.phpt b/ext/mbstring/tests/bug78559.phpt new file mode 100644 index 0000000000..afe412c141 --- /dev/null +++ b/ext/mbstring/tests/bug78559.phpt @@ -0,0 +1,15 @@ +--TEST-- +Bug #78559 (#78559 Heap buffer overflow in mb_eregi) +--SKIPIF-- +<?php +if (!extension_loaded('mbstring')) die('skip mbstring extension not available'); +if (!function_exists('mb_ereg')) die('skip mb_ereg() not available'); +?> +--FILE-- +<?php +$str = "5b5b5b5b5b5b5b492a5bce946b5c4b5d5c6b5c4b5d5c4b5d1cceb04b5d1cceb07a73717e4b1c52525252525252525252525252525252525252525252525252492a5bce946b5c4b5d5c6b5c4b5d5c4b5d1cceb04b5d1cceb07a73717e4b1c1cceb04b5d1cceb07a73717e4b1c302c36303030ceb07b7bd2a15c305c30663f436f6e74655c5238416711087b363030302c36303030ceb07b7b7b7b7b7b7b363030302c36303030ceb07b7b7b7b7b7b7b4a01"; +$str = hex2bin($str); +var_dump(mb_eregi($str, $str)); +?> +--EXPECT-- +bool(false) |