File: dl-cve-2007-4887.phpt

package info (click to toggle)
php8.4 8.4.11-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 208,108 kB
  • sloc: ansic: 1,060,628; php: 35,345; sh: 11,866; cpp: 7,201; pascal: 4,913; javascript: 3,091; asm: 2,810; yacc: 2,411; makefile: 689; xml: 446; python: 301; awk: 148
file content (21 lines) | stat: -rw-r--r-- 496 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
--TEST--
dl() filename length checks (CVE-2007-4887)
--SKIPIF--
<?php
$enabled_sapi = array('cgi-fcgi', 'cli', 'embed', 'fpm');
if (!in_array(php_sapi_name(), $enabled_sapi)) {
    die('skip dl() is not enabled for ' . php_sapi_name());
}
if (getenv('SKIP_ASAN')) die('xleak dl() crashes LSan');
?>
--INI--
enable_dl=1
--FILE--
<?php

var_dump(dl(str_repeat("a", 8376757)));

?>
--EXPECTF--
Warning: dl(): Filename exceeds the maximum allowed length of %d characters in %s on line %d
bool(false)