mirror of
https://github.com/php/php-src.git
synced 2026-03-24 08:12:21 +01:00
e504ab778c
This can happen if you have a valid callable name with a NUL byte in it, on a non-interned string entry. This can be done by abusing anonymous classes. Closes GH-20452.
84 lines
2.3 KiB
PHP
84 lines
2.3 KiB
PHP
--TEST--
|
|
registerPHPFunctions() with callables - error cases
|
|
--EXTENSIONS--
|
|
dom
|
|
--FILE--
|
|
<?php
|
|
|
|
$doc = new DOMDocument();
|
|
$doc->loadHTML('<a href="https://php.net">hello</a>');
|
|
|
|
$xpath = new DOMXPath($doc);
|
|
try {
|
|
$xpath->registerPhpFunctions("nonexistent");
|
|
} catch (TypeError $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
try {
|
|
$xpath->registerPhpFunctions(function () {});
|
|
} catch (TypeError $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
try {
|
|
$xpath->registerPhpFunctions([function () {}]);
|
|
} catch (Throwable $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
try {
|
|
$xpath->registerPhpFunctions([var_dump(...)]);
|
|
} catch (Throwable $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
try {
|
|
$xpath->registerPhpFunctions(["nonexistent"]);
|
|
} catch (Throwable $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
try {
|
|
$xpath->registerPhpFunctions(["" => var_dump(...)]);
|
|
} catch (Throwable $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
try {
|
|
$xpath->registerPhpFunctions(["\0" => var_dump(...)]);
|
|
} catch (Throwable $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
try {
|
|
$xpath->registerPhpFunctions("");
|
|
} catch (Throwable $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
$x = new class {
|
|
public static function dump() {}
|
|
};
|
|
|
|
$classes = get_declared_classes();
|
|
|
|
try {
|
|
$str = str_repeat($classes[count($classes) - 1] . '::dump', random_int(1, 1));
|
|
$xpath->registerPhpFunctions([$str]);
|
|
} catch (Throwable $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
?>
|
|
--EXPECT--
|
|
DOMXPath::registerPhpFunctions(): Argument #1 ($restrict) must be a callable, function "nonexistent" not found or invalid function name
|
|
DOMXPath::registerPhpFunctions(): Argument #1 ($restrict) must be of type array|string|null, Closure given
|
|
Object of class Closure could not be converted to string
|
|
Object of class Closure could not be converted to string
|
|
DOMXPath::registerPhpFunctions(): Argument #1 ($restrict) must be an array with valid callbacks as values, function "nonexistent" not found or invalid function name
|
|
DOMXPath::registerPhpFunctions(): Argument #1 ($restrict) must be an array containing valid callback names
|
|
DOMXPath::registerPhpFunctions(): Argument #1 ($restrict) must be an array containing valid callback names
|
|
DOMXPath::registerPhpFunctions(): Argument #1 ($restrict) must be a valid callback name
|
|
DOMXPath::registerPhpFunctions(): Argument #1 ($restrict) must be an array containing valid callback names
|