mirror of
https://github.com/php/php-src.git
synced 2026-03-31 04:32:19 +02:00
66c35b083b
* PHP-7.2: Validate subject encoding in mb_split and mb_ereg_match Validate pattern against mbregex encoding SQLite3: add DEFENSIVE config for SQLite >= 3.26.0 as a mitigation strategy against potential security flaws
20 lines
528 B
PHP
20 lines
528 B
PHP
--TEST--
|
|
Bug #72994 (mbc_to_code() out of bounds read)
|
|
--SKIPIF--
|
|
<?php
|
|
if (!extension_loaded('mbstring')) die('skip mbstring extension not available');
|
|
if (!function_exists('mb_ereg_replace')) die('skip mb_ereg_replace() not available');
|
|
?>
|
|
--FILE--
|
|
<?php
|
|
$var1 = mb_ereg_replace($var-232338951,NULL,NULL,NULL);
|
|
var_dump($var1);
|
|
?>
|
|
===DONE===
|
|
--EXPECTF--
|
|
Notice: Undefined variable: var in %s on line %d
|
|
|
|
Warning: mb_ereg_replace(): Pattern is not valid under UTF-8 encoding in %sbug72994.php on line %d
|
|
bool(false)
|
|
===DONE===
|