mirror of
https://github.com/php/php-src.git
synced 2026-03-24 00:02:20 +01:00
405be1c940
There are two bugfixes here. The first was a crash that I discovered while working on GH-19035. The check for when a file pointer was still occupied was wrong, leading to a UAF. Strangely, zip got this right. The second issue was that even after fixing the first one, the file contents were garbage. This is because the file write offset for the phar stream was wrong. Closes GH-19038.
26 lines
424 B
PHP
26 lines
424 B
PHP
--TEST--
|
|
GH-19038 (Phar crash and data corruption with SplFileObject)
|
|
--EXTENSIONS--
|
|
phar
|
|
--INI--
|
|
phar.readonly=0
|
|
--FILE--
|
|
<?php
|
|
|
|
$phar = new Phar(__DIR__ . "/gh19038.phar");
|
|
$phar->addFromString("file", "123");
|
|
$file = $phar["file"]->openFile();
|
|
$file->fseek(3);
|
|
var_dump($file->fwrite("456", 3));
|
|
$file->fseek(0);
|
|
echo $file->fread(100);
|
|
|
|
?>
|
|
--CLEAN--
|
|
<?php
|
|
@unlink(__DIR__ . "/gh19038.phar");
|
|
?>
|
|
--EXPECT--
|
|
int(3)
|
|
123456
|