diff options
| author | Anatol Belski <ab@php.net> | 2017-10-24 11:28:17 +0200 |
|---|---|---|
| committer | Anatol Belski <ab@php.net> | 2017-10-24 11:28:17 +0200 |
| commit | a7815e63bdab95f7b9b0e32c52c81a4b6ad3a8f6 (patch) | |
| tree | 8daaeded9e2e9da781dd0f3b54701899a2d47dd9 /ext/wddx | |
| parent | d37658be6c1016fe0965fa9d947ec01eae0c7946 (diff) | |
| download | php-git-a7815e63bdab95f7b9b0e32c52c81a4b6ad3a8f6.tar.gz | |
Fixed bug #75055 Out-Of-Bounds Read in timelib_meridian()
Diffstat (limited to 'ext/wddx')
| -rw-r--r-- | ext/wddx/tests/bug75055.phpt | 20 | ||||
| -rw-r--r-- | ext/wddx/tests/bug75055.wddx | 13 |
2 files changed, 33 insertions, 0 deletions
diff --git a/ext/wddx/tests/bug75055.phpt b/ext/wddx/tests/bug75055.phpt new file mode 100644 index 0000000000..2956284d22 --- /dev/null +++ b/ext/wddx/tests/bug75055.phpt @@ -0,0 +1,20 @@ +--TEST-- +Bug #75055 Out-Of-Bounds Read in timelib_meridian() +--SKIPIF-- +<?php if (!extension_loaded("wddx")) print "skip"; ?> +--FILE-- +<?php + +$file_str = dirname(__FILE__) . "/bug75055.wddx"; + +$wddx_str = file_get_contents($file_str); +print strlen($wddx_str) . " bytes read.\n"; + +var_dump(wddx_deserialize($wddx_str)); +?> +--EXPECT-- +323 bytes read. +array(1) { + ["aDateTime"]=> + string(12) "frONt of 0 0" +} diff --git a/ext/wddx/tests/bug75055.wddx b/ext/wddx/tests/bug75055.wddx new file mode 100644 index 0000000000..6493352469 --- /dev/null +++ b/ext/wddx/tests/bug75055.wddx @@ -0,0 +1,13 @@ +<?xml version='1.0'?>
+<!DOCTYPE wddxPacket SYSTEM 'wddx_0100.dtd'>
+<wddxPacket version='1.0'>
+<header/>
+ <data>
+ <struct>
+ <var name='aDateTime'>
+ <dateTime>frONt of 0 0</dateTime>
+ </var>
+ </struct>
+ </data>
+</wddxPacket>
+
|