#47188 [Opn->Fbk]: Zip::extractTo segfault on '..' paths

From: Date: Sat, 25 Apr 2009 16:12:03 +0000
Subject: #47188 [Opn->Fbk]: Zip::extractTo segfault on '..' paths
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-136307@lists.php.net to get a copy of this message 
 ID:               47188
 Updated by:       jani@php.net
 Reported By:      seanius at debian dot org
-Status:           Open
+Status:           Feedback
 Bug Type:         Zip Related
 Operating System: Debian
 PHP Version:      5.2.8
 New Comment:

Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/

I can not reproduce this with latest CVS checkout of PHP_5_2.


Previous Comments:
------------------------------------------------------------------------

[2009-01-22 06:53:07] seanius at debian dot org

Description:
------------
originally reported to php-internals here:

http://news.php.net/php.internals/42758

pierre has backported a couple functions from 5.3 as a first attempt at
patching 5.2.8 here:

http://news.php.net/php.internals/42762

i have not yet tested this patch, but am reporting here first as
requested :)

Reproduce code:
---------------
http://people.debian.org/~seanius/php/security/ziptest.tgz


Expected result:
----------------
rangda[/home/sean/ziptest] php ziptest.php                             
     :)
opening 'normal' zipfile...ok.
extracted.
opening 'bad' zipfile...ok.
extracted.

(and then two extracted directories should exist)


Actual result:
--------------
rangda[/home/sean/ziptest] php ziptest.php                             
     :)
opening 'normal' zipfile...ok.
extracted.
opening 'bad' zipfile...ok.
zsh: segmentation fault  php ziptest.php



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=47188&edit=1

Thread (2 messages)

« previous php.bugs (#136307) next »