File: dl-cve-2007-4887.phpt

package info (click to toggle)
php8.2 8.2.28-1~deb12u1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 209,452 kB
  • sloc: ansic: 736,540; php: 33,046; sh: 11,432; cpp: 7,005; pascal: 4,448; javascript: 3,112; asm: 2,404; yacc: 2,222; xml: 1,784; makefile: 689; awk: 148
file content (21 lines) | stat: -rw-r--r-- 495 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
--TEST--
dl() filename length checks (CVE-2007-4887)
--SKIPIF--
<?php
$enabled_sapi = array('cgi-fcgi', 'cli', 'embed', 'fpm');
if (!in_array(php_sapi_name(), $enabled_sapi)) {
    die('skip dl() is not enabled for ' . php_sapi_name());
}
if (getenv('SKIP_ASAN')) die('skip dl() crashes LSan');
?>
--INI--
enable_dl=1
--FILE--
<?php

var_dump(dl(str_repeat("a", 8376757)));

?>
--EXPECTF--
Warning: dl(): Filename exceeds the maximum allowed length of %d characters in %s on line %d
bool(false)