/
vshmidt
/
php
Обзор
Документация
Войти
/
vshmidt
/
php
Код
Запросы
0
Задачи
Вики
Пакеты
0
Релизы
0
Аналитика
Безопасность
master
ext/libxml/tests/bug61367-write.phpt
48 строк
1 KB
Nikita Popov
Deprecate implicit dynamic properties
26 ноя 2021, 16:10
26 ноя 2021, 16:10
902d643
Код
Авторство
О чём код?
--TEST-- Bug #61367: open_basedir bypass in libxml RSHUTDOWN: write test --EXTENSIONS-- dom --INI-- open_basedir=. --FILE-- <?php class StreamExploiter { public $context; public function stream_close ( ) { $doc = new DOMDocument; $doc->appendChild($doc->createTextNode('hello')); var_dump($doc->save(dirname(getcwd()) . '/bad')); } public function stream_open ( $path , $mode , $options , &$opened_path ) { return true; } } var_dump(mkdir('test_bug_61367-write')); var_dump(mkdir('test_bug_61367-write/base')); var_dump(file_put_contents('test_bug_61367-write/bad', 'blah')); var_dump(chdir('test_bug_61367-write/base')); stream_wrapper_register( 'exploit', 'StreamExploiter' ); $s = fopen( 'exploit://', 'r' ); ?> --CLEAN-- <?php @unlink('test_bug_61367-write/bad'); rmdir('test_bug_61367-write/base'); rmdir('test_bug_61367-write'); ?> --EXPECTF-- bool(true) bool(true) int(4) bool(true) Warning: DOMDocument::save(): open_basedir restriction in effect. File(%s) is not within the allowed path(s): (.) in %s on line %d Warning: DOMDocument::save(%s): Failed to open stream: Operation not permitted in %s on line %d bool(false)