diff options
| -rw-r--r-- | ext/standard/tests/strings/bug38322.phpt | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/ext/standard/tests/strings/bug38322.phpt b/ext/standard/tests/strings/bug38322.phpt new file mode 100644 index 0000000000..37f5a93f66 --- /dev/null +++ b/ext/standard/tests/strings/bug38322.phpt @@ -0,0 +1,13 @@ +--TEST-- +Bug #38322 (reading past array in sscanf() leads to segfault/arbitary code execution) +--FILE-- +<?php + +$str = "a b c d e"; +var_dump(sscanf("a ",'%1$s',$str)); + +echo "Done\n"; +?> +--EXPECTF-- +int(1) +Done |