mirror of
https://github.com/php/php-src.git
synced 2026-04-28 02:33:17 +02:00
Nikita Popov
32 lines
634 B
PHP
32 lines
634 B
PHP
--TEST--
|
|
Bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories)
|
|
--EXTENSIONS--
|
|
zip
|
|
--FILE--
|
|
<?php
|
|
|
|
$dir = __DIR__."/bug70350";
|
|
mkdir($dir);
|
|
$archive = new ZipArchive();
|
|
$archive->open("$dir/a.zip",ZipArchive::CREATE);
|
|
$archive->addEmptyDir("../down2/");
|
|
$archive->close();
|
|
|
|
$archive2 = new ZipArchive();
|
|
$archive2->open("$dir/a.zip");
|
|
$archive2->extractTo($dir);
|
|
$archive2->close();
|
|
var_dump(file_exists("$dir/down2/"));
|
|
var_dump(file_exists("../down2/"));
|
|
?>
|
|
--CLEAN--
|
|
<?php
|
|
$dir = __DIR__."/bug70350";
|
|
rmdir("$dir/down2");
|
|
unlink("$dir/a.zip");
|
|
rmdir($dir);
|
|
?>
|
|
--EXPECT--
|
|
bool(true)
|
|
bool(false)
|