summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStanislav Malyshev <stas@php.net>2019-08-25 19:21:04 -0700
committerStanislav Malyshev <stas@php.net>2019-08-25 19:21:04 -0700
commit5d25ebb0dd30cdf4e8c7e83d1f0788e8fdb1c4ef (patch)
treeabfaebe28e09376263d5b3868b5948cfc713b8fc
parentd3f2cfe20a5e9faf967c404a872ec9b4e14efe81 (diff)
parent4b4a656d9e5fac90373521b6624747dd7aa3b9e8 (diff)
downloadphp-git-5d25ebb0dd30cdf4e8c7e83d1f0788e8fdb1c4ef.tar.gz
Merge branch 'PHP-7.2' into PHP-7.3
* PHP-7.2: Fix #75457: heap-use-after-free in php7.0.25
-rw-r--r--ext/pcre/tests/bug75457.phpt10
1 files changed, 10 insertions, 0 deletions
diff --git a/ext/pcre/tests/bug75457.phpt b/ext/pcre/tests/bug75457.phpt
new file mode 100644
index 0000000000..c7ce9ed0f9
--- /dev/null
+++ b/ext/pcre/tests/bug75457.phpt
@@ -0,0 +1,10 @@
+--TEST--
+Bug #75457 (heap-use-after-free in php7.0.25)
+--FILE--
+<?php
+$pattern = "/(((?(?C)0?=))(?!()0|.(?0)0)())/";
+var_dump(preg_match($pattern, "hello"));
+?>
+--EXPECTF--
+Warning: preg_match(): Compilation failed: assertion expected after (?( or (?(?C) at offset 4 in %sbug75457.php on line %d
+bool(false)