stas Thu Sep 20 18:45:03 2007 UTC Modified files: /php-src/ext/standard/tests/general_functions dl-cve-2007-4887.phpt Log: add test for dl() with long name http://cvs.php.net/viewvc.cgi/php-src/ext/standard/tests/general_functions/dl-cve-2007-4887.phpt?r1=1.1&r2=1.2&diff_format=u Index: php-src/ext/standard/tests/general_functions/dl-cve-2007-4887.phpt diff -u /dev/null php-src/ext/standard/tests/general_functions/dl-cve-2007-4887.phpt:1.2 --- /dev/null Thu Sep 20 18:45:03 2007 +++ php-src/ext/standard/tests/general_functions/dl-cve-2007-4887.phpt Thu Sep 20 18:45:03 2007 @@ -0,0 +1,10 @@ +--TEST-- +dl() filename length checks (CVE-2007-4887) +--FILE-- +<?php +var_dump(dl(str_repeat("a", 8376757))); +?> +--EXPECTF-- + +Warning: dl(): File name exceeds the maximum allowed length of %d characters in %s on line %d +bool(false)
-- PHP CVS Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php