Return to cve-2014-1943.phpt CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / php / ext / fileinfo / tests

Annotation of embedaddon/php/ext/fileinfo/tests/cve-2014-1943.phpt, revision 1.1.1.1

1.1       misho       1: --TEST--
                      2: Bug #66731: file: infinite recursion
                      3: --SKIPIF--
                      4: <?php
                      5: if (!class_exists('finfo'))
                      6:        die('skip no fileinfo extension');
                      7: --FILE--
                      8: <?php
                      9: $fd = __DIR__.'/cve-2014-1943.data';
                     10: $fm = __DIR__.'/cve-2014-1943.magic';
                     11: 
                     12: $a = "\105\122\000\000\000\000\000";
                     13: $b = str_repeat("\001", 250000);
                     14: $m =  "0           byte        x\n".
                     15:       ">(1.b)      indirect    x\n";
                     16: 
                     17: file_put_contents($fd, $a);
                     18: $fi = finfo_open(FILEINFO_NONE);
                     19: var_dump(finfo_file($fi, $fd));
                     20: finfo_close($fi);
                     21: 
                     22: file_put_contents($fd, $b);
                     23: file_put_contents($fm, $m);
                     24: $fi = finfo_open(FILEINFO_NONE, $fm);
                     25: var_dump(finfo_file($fi, $fd));
                     26: finfo_close($fi);
                     27: ?>
                     28: Done
                     29: --CLEAN--
                     30: <?php
                     31: @unlink(__DIR__.'/cve-2014-1943.data');
                     32: @unlink(__DIR__.'/cve-2014-1943.magic');
                     33: ?>
                     34: --EXPECTF--
                     35: string(%d) "%s"
                     36: 
                     37: Warning: finfo_file(): Failed identify data 0:(null) in %s on line %d
                     38: bool(false)
                     39: Done