Req #39863 [Asn->Csd]: file_exists() silently truncates after a null byte

Edit report at https://bugs.php.net/bug.php?id=39863&edit=1 ID: 39863 Updated by: felipe@php.net Reported by: djcapelis at gmail dot com Summary: file_exists() silently truncates after a null byte -Status: Assigned +Status: Closed Type: Feature/Change Request Package: *General Issues Operating System: Linux, MacOSX PHP Version: 4.4.4, 5.1.5 Assigned To: pajoye Block user comment: N Private report: N CVE-ID: 2006-7243 New Comment: This already has been fixed. Thanks. Previous Comments: ------------------------------------------------------------------------ [2011-06-06 04:34:44] felipe@php.net Automatic comment from SVN on behalf of felipe Revision: http://svn.php.net/viewvc/?view=revision&revision=311855 Log: - Restore fix for #39863 (do not accept paths with NULL in them) # This was removed by regenerating the VM months ago ------------------------------------------------------------------------ [2011-05-17 01:28:49] tyrael@php.net Automatic comment from SVN on behalf of tyrael Revision: http://svn.php.net/viewvc/?view=revision&revision=311114 Log: removing XFAIL as #39863 has already been fixed ------------------------------------------------------------------------ [2011-05-16 21:40:15] tyrael@php.net Automatic comment from SVN on behalf of tyrael Revision: http://svn.php.net/viewvc/?view=revision&revision=311103 Log: removing XFAIL as #39863 has already been fixed ------------------------------------------------------------------------ [2011-05-16 01:06:44] tyra3l at gmail dot com the testcase a little bit confusing: it should fail until the bug is fixed, and because it was a known bug, it was marked as a failing test (XFAIL) now that the bug got fixed, but the test wasn't modified to reflect this, we got a situation, when an test passed when it is expected to fail. which means that the bug is fixed. I will modify the TEST and remove the XFAIL mark, and if the pass fails in the future, that means that we got a regression. Tyrael ------------------------------------------------------------------------ [2011-04-14 15:00:34] paul dot kraus at ag dot ny dot gov Just compiled 5.3.6 on Solaris 10 / SPARC and make test reports "Bug #39863 (file_exists() silently truncates after a null byte) [ext/standard/test/file/bug39863.phpt] (warn: XFAIL section but test passes)" so it appears that this bug is NOT fixed as of 5.3.6 on Solaris 10 (unless I am misreading the test report). ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=39863 -- Edit this bug report at https://bugs.php.net/bug.php?id=39863&edit=1