cvs: php-src /ext/iconv/tests ob_iconv_handler-charset-length-cve-2007-4840.phpt
| From: | Stanislav Malyshev | Date: | Wed, 19 Sep 2007 00:49:25 +0000 |
| Subject: | cvs: php-src /ext/iconv/tests ob_iconv_handler-charset-length-cve-2007-4840.phpt | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-46225@lists.php.net to get a copy of this message | ||
stas Wed Sep 19 00:49:25 2007 UTC
Modified files:
/php-src/ext/iconv/tests
ob_iconv_handler-charset-length-cve-2007-4840.phpt
Log:
MFB one more test
http://cvs.php.net/viewvc.cgi/php-src/ext/iconv/tests/ob_iconv_handler-charset-length-cve-2007-4840.phpt?r1=1.1&r2=1.2&diff_format=u
Index: php-src/ext/iconv/tests/ob_iconv_handler-charset-length-cve-2007-4840.phpt
diff -u /dev/null php-src/ext/iconv/tests/ob_iconv_handler-charset-length-cve-2007-4840.phpt:1.2
--- /dev/null Wed Sep 19 00:49:25 2007
+++ php-src/ext/iconv/tests/ob_iconv_handler-charset-length-cve-2007-4840.phpt Wed Sep 19 00:49:25
2007
@@ -0,0 +1,12 @@
+--TEST--
+ob_iconv_handler() charset parameter length checks (CVE-2007-4840)
+--SKIPIF--
+<?php extension_loaded('iconv') or die('skip iconv extension is not
available'); ?>
+--FILE--
+<?php
+ini_set("iconv.output_encoding", str_repeat("a", 9000000));
+ob_start("ob_iconv_handler");
+print "done";
+?>
+--EXPECT--
+done