]> granicus.if.org Git - php/commitdiff
add test
authorStanislav Malyshev <stas@php.net>
Mon, 4 Aug 2014 07:08:08 +0000 (00:08 -0700)
committerStanislav Malyshev <stas@php.net>
Mon, 4 Aug 2014 07:08:08 +0000 (00:08 -0700)
ext/fileinfo/tests/cve-2014-3538.phpt [new file with mode: 0644]

diff --git a/ext/fileinfo/tests/cve-2014-3538.phpt b/ext/fileinfo/tests/cve-2014-3538.phpt
new file mode 100644 (file)
index 0000000..d6bc9c6
--- /dev/null
@@ -0,0 +1,35 @@
+--TEST--
+Bug #66731: file: extensive backtraking
+--SKIPIF--
+<?php
+if (!class_exists('finfo'))
+       die('skip no fileinfo extension');
+--FILE--
+<?php
+$fd = __DIR__.'/cve-2014-3538.data';
+
+file_put_contents($fd,
+  'try:' .
+  str_repeat("\n", 1000000));
+
+$fi = finfo_open(FILEINFO_NONE);
+$t = microtime(true);
+var_dump(finfo_file($fi, $fd));
+$t = microtime(true) - $t;
+finfo_close($fi);
+if ($t < 1) {
+       echo "Ok\n";
+} else {
+       printf("Failed, time=%.2f\n", $t);
+}
+
+?>
+Done
+--CLEAN--
+<?php
+@unlink(__DIR__.'/cve-2014-3538.data');
+?>
+--EXPECTF--
+string(%d) "%s"
+Ok
+Done
\ No newline at end of file