mirror of
https://github.com/php/php-src.git
synced 2026-03-24 00:02:20 +01:00
eab209d81d
`search` can be the empty string, so we need to check the length before checking the last char. Closes GH-17519.
24 lines
510 B
PHP
24 lines
510 B
PHP
--TEST--
|
|
GH-17518 (offset overflow phar extractTo())
|
|
--EXTENSIONS--
|
|
phar
|
|
--INI--
|
|
phar.readonly=0
|
|
--FILE--
|
|
<?php
|
|
$fname = __DIR__.'/gh17518.phar.php';
|
|
$phar = new Phar($fname);
|
|
$phar['a'] = 'b';
|
|
try {
|
|
$phar->extractTo(__DIR__ . '/gh17518', '');
|
|
} catch (Throwable $e) {
|
|
echo $e::class, ": ", $e->getMessage(), "\n";
|
|
}
|
|
?>
|
|
--CLEAN--
|
|
<?php
|
|
@unlink(__DIR__.'/gh17518.phar.php');
|
|
?>
|
|
--EXPECTF--
|
|
PharException: phar error: attempted to extract non-existent file or directory "" from phar "%sgh17518.phar.php"
|