diff options
| author | Stanislav Malyshev <stas@php.net> | 2019-09-23 21:51:26 -0700 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2019-09-23 21:51:26 -0700 |
| commit | a9dabe0e20abd1311ecd9bc449272acab7813b1f (patch) | |
| tree | feba1974f5dd35fc8470a77f627189457ded21bd /ext | |
| parent | c761616f664aa19b5fb457311767f5456dc2e77c (diff) | |
| parent | e7befd38d4fc0a599d5b33b340bc7244458aee01 (diff) | |
| download | php-git-a9dabe0e20abd1311ecd9bc449272acab7813b1f.tar.gz | |
Merge branch 'PHP-7.4'
* PHP-7.4:
Fix #78559: Heap buffer overflow in mb_eregi
Diffstat (limited to 'ext')
| -rw-r--r-- | ext/mbstring/tests/bug78559.phpt | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/ext/mbstring/tests/bug78559.phpt b/ext/mbstring/tests/bug78559.phpt new file mode 100644 index 0000000000..afe412c141 --- /dev/null +++ b/ext/mbstring/tests/bug78559.phpt @@ -0,0 +1,15 @@ +--TEST-- +Bug #78559 (#78559 Heap buffer overflow in mb_eregi) +--SKIPIF-- +<?php +if (!extension_loaded('mbstring')) die('skip mbstring extension not available'); +if (!function_exists('mb_ereg')) die('skip mb_ereg() not available'); +?> +--FILE-- +<?php +$str = "5b5b5b5b5b5b5b492a5bce946b5c4b5d5c6b5c4b5d5c4b5d1cceb04b5d1cceb07a73717e4b1c52525252525252525252525252525252525252525252525252492a5bce946b5c4b5d5c6b5c4b5d5c4b5d1cceb04b5d1cceb07a73717e4b1c1cceb04b5d1cceb07a73717e4b1c302c36303030ceb07b7bd2a15c305c30663f436f6e74655c5238416711087b363030302c36303030ceb07b7b7b7b7b7b7b363030302c36303030ceb07b7b7b7b7b7b7b4a01"; +$str = hex2bin($str); +var_dump(mb_eregi($str, $str)); +?> +--EXPECT-- +bool(false) |