com php-src: - add test for bug #55000 and #54374: tests/basic/bug55500.phpt

From:	Pierre Joye	Date:	Wed, 21 Mar 2012 06:00:22 +0000
Subject:	com php-src: - add test for bug #55000 and #54374: tests/basic/bug55500.phpt
Groups:	php.cvs
Request:	Send a blank email to [email protected] to get a copy of this message

Commit:    baeaafd3951451c7dadf949c7677e90141c1e17a
Author:    Pierre Joye <[email protected]>         Wed, 21 Mar 2012 07:00:22 +0100
Parents:   95dcd799fb6fdccbc60d3bba3cd759f6b421ee69
Branches:  PHP-5.3

Link:       http://git.php.net/?p=php-src.git;a=commitdiff;h=baeaafd3951451c7dadf949c7677e90141c1e17a

Log:
- add test for bug #55000 and #54374

Bugs:
https://bugs.php.net/55000
https://bugs.php.net/54374

Changed paths:
  A  tests/basic/bug55500.phpt


Diff:
baeaafd3951451c7dadf949c7677e90141c1e17a
diff --git a/tests/basic/bug55500.phpt b/tests/basic/bug55500.phpt
new file mode 100644
index 0000000..97eeea2
--- /dev/null
+++ b/tests/basic/bug55500.phpt
@@ -0,0 +1,68 @@
+--TEST--
+Bug #55500 (Corrupted $_FILES indices lead to security concern)
+--INI--
+file_uploads=1
+error_reporting=E_ALL&~E_NOTICE
+upload_max_filesize=1024
+max_file_uploads=10
+--POST_RAW--
+Content-Type: multipart/form-data;
boundary=---------------------------20896060251896012921717172737
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="file[]"; filename="file1.txt"
+Content-Type: text/plain-file1
+
+1
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="file[[type]"; filename="file2.txt"
+Content-Type: text/plain-file2
+
+2
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="file[[name]"; filename="file3.txt"
+Content-Type: text/plain-file3
+
+3
+-----------------------------20896060251896012921717172737
+Content-Disposition: form-data; name="file[name]["; filename="file4.txt"
+Content-Type: text/plain-file3
+
+4
+-----------------------------20896060251896012921717172737--
+--FILE--
+<?php
+var_dump($_FILES);
+var_dump($_POST);
+?>
+--EXPECTF--
+array(1) {
+  [%u|b%"file"]=>
+  array(5) {
+    [%u|b%"name"]=>
+    array(1) {
+      [0]=>
+      %unicode|string%(9) "file1.txt"
+    }
+    [%u|b%"type"]=>
+    array(1) {
+      [0]=>
+      %unicode|string%(16) "text/plain-file1"
+    }
+    [%u|b%"tmp_name"]=>
+    array(1) {
+      [0]=>
+      %unicode|string%(%d) "%s"
+    }
+    [%u|b%"error"]=>
+    array(1) {
+      [0]=>
+      int(0)
+    }
+    [%u|b%"size"]=>
+    array(1) {
+      [0]=>
+      int(1)
+    }
+  }
+}
+array(0) {
+}



   

Thread (1 message)

• Pierre JoyeWed, 21 Mar 2012 06:00:22 +0000