summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rwxr-xr-xext/iconv/tests/ob_iconv_handler-charset-length-cve-2007-4840.phpt12
1 files changed, 12 insertions, 0 deletions
diff --git a/ext/iconv/tests/ob_iconv_handler-charset-length-cve-2007-4840.phpt b/ext/iconv/tests/ob_iconv_handler-charset-length-cve-2007-4840.phpt
new file mode 100755
index 0000000000..8cf54b732a
--- /dev/null
+++ b/ext/iconv/tests/ob_iconv_handler-charset-length-cve-2007-4840.phpt
@@ -0,0 +1,12 @@
+--TEST--
+ob_iconv_handler() charset parameter length checks (CVE-2007-4840)
+--SKIPIF--
+<?php extension_loaded('iconv') or die('skip iconv extension is not available'); ?>
+--FILE--
+<?php
+ini_set("iconv.output_encoding", str_repeat("a", 9000000));
+ob_start("ob_iconv_handler");
+print "done";
+?>
+--EXPECT--
+done