summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStanislav Malyshev <stas@php.net>2019-08-25 19:21:04 -0700
committerChristoph M. Becker <cmbecker69@gmx.de>2019-08-27 23:15:50 +0200
commit510ca4a126e61ac19e0c71979b140782e4767d64 (patch)
treede6eedc15f4f7de7d13937d18f98de96ac1290c8
parentc4cfab8f8425d01cb8beba604d8a3c9f0ec611b7 (diff)
downloadphp-git-510ca4a126e61ac19e0c71979b140782e4767d64.tar.gz
Merge branch 'PHP-7.2' into PHP-7.3
* PHP-7.2: Fix #75457: heap-use-after-free in php7.0.25 (cherry picked from commit 5d25ebb0dd30cdf4e8c7e83d1f0788e8fdb1c4ef)
-rw-r--r--ext/pcre/tests/bug75457.phpt10
1 files changed, 10 insertions, 0 deletions
diff --git a/ext/pcre/tests/bug75457.phpt b/ext/pcre/tests/bug75457.phpt
new file mode 100644
index 0000000000..571a4bde77
--- /dev/null
+++ b/ext/pcre/tests/bug75457.phpt
@@ -0,0 +1,10 @@
+--TEST--
+Bug #75457 (heap-use-after-free in php7.0.25)
+--FILE--
+<?php
+$pattern = "/(((?(?C)0?=))(?!()0|.(?0)0)())/";
+var_dump(preg_match($pattern, "hello"));
+?>
+--EXPECTF--
+Warning: preg_match(): Compilation failed: assertion expected after (?( or (?(?C) at offset %d in %sbug75457.php on line %d
+bool(false)