]> granicus.if.org Git - php/commitdiff
Fork test with pcre.jit=0
authorAnatol Belski <ab@php.net>
Sat, 10 Nov 2018 19:05:56 +0000 (20:05 +0100)
committerAnatol Belski <ab@php.net>
Sat, 10 Nov 2018 19:06:47 +0000 (20:06 +0100)
ext/fileinfo/tests/cve-2014-3538-nojit.phpt [new file with mode: 0644]

diff --git a/ext/fileinfo/tests/cve-2014-3538-nojit.phpt b/ext/fileinfo/tests/cve-2014-3538-nojit.phpt
new file mode 100644 (file)
index 0000000..2dc5ddb
--- /dev/null
@@ -0,0 +1,40 @@
+--TEST--
+Bug #66731: file: extensive backtraking, with pcre.jit=0
+--SKIPIF--
+<?php
+if (defined("PHP_DEBUG") && PHP_DEBUG)
+       die("skip not suitable for debug build");
+if (!class_exists('finfo'))
+       die('skip no fileinfo extension');
+?>
+--INI--
+pcre.jit=0
+--FILE--
+<?php
+$fd = __DIR__.'/cve-2014-3538.data';
+
+file_put_contents($fd,
+  'try:' .
+  str_repeat("\n", 1000000));
+
+$fi = finfo_open(FILEINFO_NONE);
+$t = microtime(true);
+var_dump(finfo_file($fi, $fd));
+$t = microtime(true) - $t;
+finfo_close($fi);
+if ($t < 1) {
+       echo "Ok\n";
+} else {
+       printf("Failed, time=%.2f\n", $t);
+}
+
+?>
+Done
+--CLEAN--
+<?php
+@unlink(__DIR__.'/cve-2014-3538.data');
+?>
+--EXPECTF--
+string(%d) "%s"
+Ok
+Done