Bug #77484 [Com]: Zend engine crashes when calling realpath in invalid working dir

From: Date: Fri, 18 Jan 2019 00:31:47 +0000
Subject: Bug #77484 [Com]: Zend engine crashes when calling realpath in invalid working dir
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-219046@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=77484&edit=1 ID: 77484 Comment by: spam2 at rhsoft dot net Reported by: marcospassos dot com at gmail dot com Summary: Zend engine crashes when calling realpath in invalid working dir Status: Open Type: Bug Package: *Directory/Filesystem functions Operating System: Mac OS 10.12.6 PHP Version: 7.3.1 Block user comment: N Private report: N New Comment: outside the PHP world this would classify as vulnerability when simple 2-liner crashs a shared server process Previous Comments: ------------------------------------------------------------------------ [2019-01-18 00:28:25] marcospassos dot com at gmail dot com Description: ------------ Calling realpath in an invalid working directory causes the engine to crash. Test script: --------------- https://3v4l.org/jWhgB Expected result: ---------------- false Actual result: -------------- Crash ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=77484&edit=1

« previous php.bugs (#219046) next »