[php-src] Issue #24599: PHP-7.4-CVE-2026-109618-109619 causes tests/lang/bug45293.phpt to fail
| From: | pqarmitage | Date: | Fri, 23 Oct 2026 12:55:12 +0000 |
| Subject: | [php-src] Issue #24599: PHP-7.4-CVE-2026-109618-109619 causes tests/lang/bug45293.phpt to fail | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-253129@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/24599
Author: pqarmitage
### Description
When running
make test on the head of branch PHP-7.4-CVE-2026-109618-109619,
tests/lang/bug45392.phpt fails. Reverting the commit that resolve the CVEs makes the
test pass again (commit 712e60f9edfd).
Resulted in this output:
```
===================================================================
PHP : /home/quentin/Downloads/php-7.4.34/sapi/cli/php
PHP_SAPI : cli
PHP_VERSION : 7.4.27-dev
ZEND_VERSION: 3.4.0
PHP_OS : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019
x86_64
INI actual : /home/quentin/Downloads/php-7.4.34
More .INIs :
---------------------------------------------------------------------
PHP : /home/quentin/Downloads/php-7.4.34/sapi/phpdbg/phpdbg
PHP_SAPI : phpdbg
PHP_VERSION : 7.4.27-dev
ZEND_VERSION: 3.4.0
PHP_OS : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019
x86_64
INI actual : /home/quentin/Downloads/php-7.4.34
More .INIs :
---------------------------------------------------------------------
CWD : /home/quentin/Downloads/php-7.4.34
Extra dirs :
VALGRIND : Not used
=====================================================================
Running selected tests.
FAIL Bug #45392 (ob_start()/ob_end_clean() and memory_limit) [tests/lang/bug45392.phpt]
=====================================================================
Number of tests : 1 1
Tests skipped : 0 ( 0.0%) --------
Tests warned : 0 ( 0.0%) ( 0.0%)
Tests failed : 1 (100.0%) (100.0%)
Tests passed : 0 ( 0.0%) ( 0.0%)
---------------------------------------------------------------------
Time taken : 0 seconds
=====================================================================
=====================================================================
FAILED TEST SUMMARY
---------------------------------------------------------------------
Bug #45392 (ob_start()/ob_end_clean() and memory_limit) [tests/lang/bug45392.phpt]
=====================================================================
```
But I expected this output instead:
```
===================================================================
PHP : /home/quentin/Downloads/php-7.4.34/sapi/cli/php
PHP_SAPI : cli
PHP_VERSION : 7.4.27-dev
ZEND_VERSION: 3.4.0
PHP_OS : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019
x86_64
INI actual : /home/quentin/Downloads/php-7.4.34
More .INIs :
---------------------------------------------------------------------
PHP : /home/quentin/Downloads/php-7.4.34/sapi/phpdbg/phpdbg
PHP_SAPI : phpdbg
PHP_VERSION : 7.4.27-dev
ZEND_VERSION: 3.4.0
PHP_OS : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019
x86_64
INI actual : /home/quentin/Downloads/php-7.4.34
More .INIs :
---------------------------------------------------------------------
CWD : /home/quentin/Downloads/php-7.4.34
Extra dirs :
VALGRIND : Not used
=====================================================================
Running selected tests.
PASS Bug #45392 (ob_start()/ob_end_clean() and memory_limit) [tests/lang/bug45392.phpt]
=====================================================================
Number of tests : 1 1
Tests skipped : 0 ( 0.0%) --------
Tests warned : 0 ( 0.0%) ( 0.0%)
Tests failed : 0 ( 0.0%) ( 0.0%)
Tests passed : 1 (100.0%) (100.0%)
---------------------------------------------------------------------
Time taken : 0 seconds
=====================================================================
```
### PHP Version
```plain
PHP 7.4.27-dev (cli) (built: Oct 23 2026 12:45:03) ( NTS )
Copyright (c) The PHP Group
Zend Engine v3.4.0, Copyright (c) Zend Technologies
This is actually commit 712e60f9edfd03f0960fc4fc3c2c375f42b90aa2 on the 7.4-CVE-2026-109618-109619
branch.
I am aware that version 7.4 is no longer supported, but I thought that I ought to report this since
it appears to be an issue with the commit to resolve the CVEs.
```
### Operating System
Fedora 31