Bug #77484 [Com]: Zend engine crashes when calling realpath in invalid working dir
| From: | spam2 at rhsoft dot net | Date: | Fri, 18 Jan 2019 00:31:47 +0000 |
| Subject: | Bug #77484 [Com]: Zend engine crashes when calling realpath in invalid working dir | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-219046@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=77484&edit=1
ID: 77484
Comment by: spam2 at rhsoft dot net
Reported by: marcospassos dot com at gmail dot com
Summary: Zend engine crashes when calling realpath in invalid
working dir
Status: Open
Type: Bug
Package: *Directory/Filesystem functions
Operating System: Mac OS 10.12.6
PHP Version: 7.3.1
Block user comment: N
Private report: N
New Comment:
outside the PHP world this would classify as vulnerability when simple 2-liner crashs a shared
server process
Previous Comments:
------------------------------------------------------------------------
[2019-01-18 00:28:25] marcospassos dot com at gmail dot com
Description:
------------
Calling realpath in an invalid working directory causes the engine to crash.
Test script:
---------------
https://3v4l.org/jWhgB
Expected result:
----------------
false
Actual result:
--------------
Crash
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=77484&edit=1