[php-src] PR #24357: date: Validate ISO 8601 duration strings for null bytes early
| From: | adapik | Date: | Thu, 15 Oct 2026 17:23:31 +0000 |
| Subject: | [php-src] PR #24357: date: Validate ISO 8601 duration strings for null bytes early | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39478@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24357
Author: adapik
timelib takes a NUL-terminated string, so everything after an embedded NUL byte was silently
ignored. Now it throws the same
Time\TimeException as for any other malformed string.
```php
// Before: Time\Duration of 5 seconds
// Now: Time\TimeException: The ISO 8601 duration string could not be parsed
Time\Duration::fromIso8601DurationString("PT5S\0garbage");
```