stas Thu Sep 20 18:45:03 2007 UTC
Modified files:
/php-src/ext/standard/tests/general_functions dl-cve-2007-4887.phpt
Log:
add test for dl() with long name
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/tests/general_functions/dl-cve-2007-4887.phpt?r1=1.1&r2=1.2&diff_format=u
Index: php-src/ext/standard/tests/general_functions/dl-cve-2007-4887.phpt
diff -u /dev/null
php-src/ext/standard/tests/general_functions/dl-cve-2007-4887.phpt:1.2
--- /dev/null Thu Sep 20 18:45:03 2007
+++ php-src/ext/standard/tests/general_functions/dl-cve-2007-4887.phpt Thu Sep
20 18:45:03 2007
@@ -0,0 +1,10 @@
+--TEST--
+dl() filename length checks (CVE-2007-4887)
+--FILE--
+<?php
+var_dump(dl(str_repeat("a", 8376757)));
+?>
+--EXPECTF--
+
+Warning: dl(): File name exceeds the maximum allowed length of %d characters
in %s on line %d
+bool(false)
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php