vshmidt/php: The PHP Interpreter

ext/pgsql/tests/bug81720.phpt

29 строк704 B

KentarouTakeda

ext/pgsql: Refactor tests (#12608)

07 ноя 2023, 01:36

07 ноя 2023, 01:36c15988a

--TEST--
Bug #81720 (Uninitialized array in pg_query_params() leading to RCE)
--EXTENSIONS--
pgsql
--SKIPIF--
<?php include("inc/skipif.inc"); ?>
--FILE--
<?php
include('inc/config.inc');

$conn = pg_connect($conn_str);

try {
    pg_query_params($conn, 'SELECT $1, $2', [1, new stdClass()]);
} catch (Throwable $ex) {
    echo $ex->getMessage(), PHP_EOL;
}

try {
    pg_send_prepare($conn, "my_query", 'SELECT $1, $2');
    pg_get_result($conn);
    pg_send_execute($conn, "my_query", [1, new stdClass()]);
} catch (Throwable $ex) {
    echo $ex->getMessage(), PHP_EOL;
}
?>
--EXPECT--
Object of class stdClass could not be converted to string
Object of class stdClass could not be converted to string