*/
PHP_METHOD(PHP_Archive, mapPhar)
{
- char *fname, *myalias, *alias, *buffer, *endbuffer, *unpack_var, *savebuf;
+ char *fname, *alias, *buffer, *endbuffer, *unpack_var, *savebuf;
phar_file_data mydata;
zend_bool compressed;
phar_manifest_entry entry;
PHAR_GET_VAL(entry.timestamp)
PHAR_GET_VAL(entry.offset_within_phar)
PHAR_GET_VAL(entry.compressed_filesize)
+ if (entry.compressed_filesize < 9) {
+ MAPPHAR_FAIL("internal corruption of phar \"%s\" (file size in phar is not large enough)")
+ }
zend_hash_add(manifest, entry.filename, entry.filename_len, &entry,
sizeof(phar_manifest_entry), NULL);
}
PHAR_GET_VAL(crc32)
PHAR_GET_VAL(actual_length)
if (actual_length != nr) {
- return -1;
+ return -2;
}
}
char *buffer;
php_url *resource = NULL;
php_stream *fp;
+ int status;
#ifdef HAVE_PHAR_ZLIB
+ unsigned long crc32;
+ php_uint32 actual_length, i;
+ char *unpack_var, *savebuf;
/* borrowed from zlib.c gzinflate() function */
- int status;
php_uint32 offset;
unsigned long length;
char *s1=NULL;
return NULL;
}
php_stream_close(fp);
- unsigned long crc32;
- php_uint32 actual_length, i;
- char *unpack_var, *savebuf;
savebuf = buffer;
#define PHAR_GET_VAL(var) \
unpack_var = (char *) &var; \
PHAR_ZLIB_ERROR
php_error_docref(NULL TSRMLS_CC, E_ERROR, "phar error: internal corruption of phar \"%s\" (filesize mismatch on file \"%s\")", buffer, internal_file);
}
- /* check crc32 */
- if (-1 == phar_postprocess_file(idata->file, idata->internal_file->uncompressed_filesize, crc32, 0)) {
+ /* check crc32/filesize */
+ status = phar_postprocess_file(idata->file, idata->internal_file->uncompressed_filesize, crc32, 0);
+ if (-1 == status) {
PHAR_ZLIB_ERROR
- php_error_docref(NULL TSRMLS_CC, E_ERROR, "phar error: internal corruption of phar \"%s\" (crc32 mismatch on file \"%s\")", buffer, internal_file);
+ php_error_docref(NULL TSRMLS_CC, E_ERROR, "phar error: internal corruption of phar \"%s\" (crc32 mismatch on file \"%s\")", buffer, internal_file);
+ return NULL;
+ }
+ if (-2 == status) {
+ PHAR_ZLIB_ERROR
+ php_error_docref(NULL TSRMLS_CC, E_ERROR, "phar error: internal corruption of phar \"%s\" (filesize mismatch on file \"%s\")", buffer, internal_file);
+ return NULL;
}
#else
php_error_docref(NULL TSRMLS_CC, E_ERROR, "zlib extension must be enabled for compressed .phar files");
}
php_stream_close(fp);
/* check length, crc32 */
- if (-1 == phar_postprocess_file(idata->file, idata->internal_file->uncompressed_filesize, 0, 1)) {
+ status = phar_postprocess_file(idata->file, idata->internal_file->uncompressed_filesize, 0, 1);
+ if (-1 == status) {
efree(idata->file);
buffer = idata->data->file;
efree(idata);
php_error_docref(NULL TSRMLS_CC, E_ERROR, "phar error: internal corruption of phar \"%s\" (crc32 mismatch on file \"%s\")", buffer, internal_file);
return NULL;
}
+ if (-2 == status) {
+ efree(idata->file);
+ buffer = idata->data->file;
+ efree(idata);
+ php_error_docref(NULL TSRMLS_CC, E_ERROR, "phar error: internal corruption of phar \"%s\" (filesize mismatch on file \"%s\")", buffer, internal_file);
+ return NULL;
+ }
memmove(idata->file, idata->file + 8, idata->internal_file->uncompressed_filesize);
}
--- /dev/null
+--TEST--
+PHP_Archive::mapPhar filesize mismatch
+--SKIPIF--
+<?php if (!extension_loaded("phar")) print "skip";?>
+--FILE--
+<?php
+function cleanup() { unlink(dirname(__FILE__) . '/008_phar.php'); }
+register_shutdown_function('cleanup');
+$file = "<?php
+PHP_Archive::mapPhar(5, 'hio', false);
+__HALT_COMPILER(); ?>";
+// compressed file length does not include 8 bytes for crc/file length and should
+$manifest = pack('V', 1) . 'a' . pack('VVVV', 1, time(), 0, 9);
+$file .= pack('VV', strlen($manifest) + 4, 1) . $manifest . pack('VV', crc32('a'), 2) . 'a';
+file_put_contents(dirname(__FILE__) . '/008_phar.php', $file);
+include dirname(__FILE__) . '/008_phar.php';
+echo file_get_contents('phar://hio/a');
+?>
+--EXPECTF--
+Fatal error: file_get_contents(): phar error: internal corruption of phar "%s" (filesize mismatch on file "a") in %s on line 12
\ No newline at end of file