blob: 37f5a93f66ed67c0ee9be79189e7534a8287f1d2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
--TEST--
Bug #38322 (reading past array in sscanf() leads to segfault/arbitary code execution)
--FILE--
<?php
$str = "a b c d e";
var_dump(sscanf("a ",'%1$s',$str));
echo "Done\n";
?>
--EXPECTF--
int(1)
Done
|