[php-src] Issue #24599: PHP-7.4-CVE-2026-109618-109619 causes tests/lang/bug45293.phpt to fail

From: Date: Fri, 23 Oct 2026 12:55:12 +0000
Subject: [php-src] Issue #24599: PHP-7.4-CVE-2026-109618-109619 causes tests/lang/bug45293.phpt to fail
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-253129@lists.php.net to get a copy of this message
Issue: https://github.com/php/php-src/issues/24599 Author: pqarmitage ### Description When running make test on the head of branch PHP-7.4-CVE-2026-109618-109619, tests/lang/bug45392.phpt fails. Reverting the commit that resolve the CVEs makes the test pass again (commit 712e60f9edfd). Resulted in this output: ``` =================================================================== PHP : /home/quentin/Downloads/php-7.4.34/sapi/cli/php PHP_SAPI : cli PHP_VERSION : 7.4.27-dev ZEND_VERSION: 3.4.0 PHP_OS : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019 x86_64 INI actual : /home/quentin/Downloads/php-7.4.34 More .INIs : --------------------------------------------------------------------- PHP : /home/quentin/Downloads/php-7.4.34/sapi/phpdbg/phpdbg PHP_SAPI : phpdbg PHP_VERSION : 7.4.27-dev ZEND_VERSION: 3.4.0 PHP_OS : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019 x86_64 INI actual : /home/quentin/Downloads/php-7.4.34 More .INIs : --------------------------------------------------------------------- CWD : /home/quentin/Downloads/php-7.4.34 Extra dirs : VALGRIND : Not used ===================================================================== Running selected tests. FAIL Bug #45392 (ob_start()/ob_end_clean() and memory_limit) [tests/lang/bug45392.phpt] ===================================================================== Number of tests : 1 1 Tests skipped : 0 ( 0.0%) -------- Tests warned : 0 ( 0.0%) ( 0.0%) Tests failed : 1 (100.0%) (100.0%) Tests passed : 0 ( 0.0%) ( 0.0%) --------------------------------------------------------------------- Time taken : 0 seconds ===================================================================== ===================================================================== FAILED TEST SUMMARY --------------------------------------------------------------------- Bug #45392 (ob_start()/ob_end_clean() and memory_limit) [tests/lang/bug45392.phpt] ===================================================================== ``` But I expected this output instead: ``` =================================================================== PHP : /home/quentin/Downloads/php-7.4.34/sapi/cli/php PHP_SAPI : cli PHP_VERSION : 7.4.27-dev ZEND_VERSION: 3.4.0 PHP_OS : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019 x86_64 INI actual : /home/quentin/Downloads/php-7.4.34 More .INIs : --------------------------------------------------------------------- PHP : /home/quentin/Downloads/php-7.4.34/sapi/phpdbg/phpdbg PHP_SAPI : phpdbg PHP_VERSION : 7.4.27-dev ZEND_VERSION: 3.4.0 PHP_OS : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019 x86_64 INI actual : /home/quentin/Downloads/php-7.4.34 More .INIs : --------------------------------------------------------------------- CWD : /home/quentin/Downloads/php-7.4.34 Extra dirs : VALGRIND : Not used ===================================================================== Running selected tests. PASS Bug #45392 (ob_start()/ob_end_clean() and memory_limit) [tests/lang/bug45392.phpt] ===================================================================== Number of tests : 1 1 Tests skipped : 0 ( 0.0%) -------- Tests warned : 0 ( 0.0%) ( 0.0%) Tests failed : 0 ( 0.0%) ( 0.0%) Tests passed : 1 (100.0%) (100.0%) --------------------------------------------------------------------- Time taken : 0 seconds ===================================================================== ``` ### PHP Version ```plain PHP 7.4.27-dev (cli) (built: Oct 23 2026 12:45:03) ( NTS ) Copyright (c) The PHP Group Zend Engine v3.4.0, Copyright (c) Zend Technologies This is actually commit 712e60f9edfd03f0960fc4fc3c2c375f42b90aa2 on the 7.4-CVE-2026-109618-109619 branch. I am aware that version 7.4 is no longer supported, but I thought that I ought to report this since it appears to be an issue with the commit to resolve the CVEs. ``` ### Operating System Fedora 31

« previous php.bugs (#253129) next »