summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStanislav Malyshev <stas@php.net>2019-08-25 19:20:59 -0700
committerStanislav Malyshev <stas@php.net>2019-08-25 19:20:59 -0700
commit4b4a656d9e5fac90373521b6624747dd7aa3b9e8 (patch)
tree3e27f50915df33061aaf447bfb0dd0117d5db003
parent087cb7bab2bc0b9673545b9559db21ea38832ab3 (diff)
parent7bf1f9d561826c4a3ed748e55bb756375cdf28b9 (diff)
downloadphp-git-4b4a656d9e5fac90373521b6624747dd7aa3b9e8.tar.gz
Merge branch 'PHP-7.1' into PHP-7.2
* PHP-7.1: Fix #75457: heap-use-after-free in php7.0.25
-rw-r--r--ext/pcre/tests/bug75457.phpt10
1 files changed, 10 insertions, 0 deletions
diff --git a/ext/pcre/tests/bug75457.phpt b/ext/pcre/tests/bug75457.phpt
new file mode 100644
index 0000000000..c7ce9ed0f9
--- /dev/null
+++ b/ext/pcre/tests/bug75457.phpt
@@ -0,0 +1,10 @@
+--TEST--
+Bug #75457 (heap-use-after-free in php7.0.25)
+--FILE--
+<?php
+$pattern = "/(((?(?C)0?=))(?!()0|.(?0)0)())/";
+var_dump(preg_match($pattern, "hello"));
+?>
+--EXPECTF--
+Warning: preg_match(): Compilation failed: assertion expected after (?( or (?(?C) at offset 4 in %sbug75457.php on line %d
+bool(false)