Repository navigation
index out of bound main/fopen_wrappers.c #17797
Description
Description
The following code:
<?php
$source = '<?php
require("sumfile.php");
?>';
try {zend_test_compile_string($source,$source,$c);} catch (Exception $e) { echo($e); }Resulted in this output:
/home/phpfuzz/WorkSpace/flowfusion/php-src/main/fopen_wrappers.c:611:18: runtime error: index 18446744073709551615 out of bounds for type 'char [4096]'
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /home/phpfuzz/WorkSpace/flowfusion/php-src/main/fopen_wrappers.c:611:18 in
To reproduce:
Commit:
commit 5acff0e61dd9a62ddff52bea25d552db45fb32e6
Author: Niels Dossche <[email protected]>
Date: Tue Feb 11 21:57:50 2025 +0100
Update NEWS and UPGRADING for zlib flock() support
[ci skip]
Closes GH-17752.
Configurations:
CC="clang-12" CXX="clang++-12" CFLAGS="-DZEND_VERIFY_TYPE_INFERENCE" CXXFLAGS="-DZEND_VERIFY_TYPE_INFERENCE" ./configure --enable-debug --enable-address-sanitizer --enable-undefined-sanitizer --enable-re2c-cgoto --enable-fpm --enable-litespeed --enable-phpdbg-debug --enable-zts --enable-bcmath --enable-calendar --enable-dba --enable-dl-test --enable-exif --enable-ftp --enable-gd --enable-gd-jis-conv --enable-mbstring --enable-pcntl --enable-shmop --enable-soap --enable-sockets --enable-sysvmsg --enable-zend-test --with-zlib --with-bz2 --with-curl --with-enchant --with-gettext --with-gmp --with-mhash --with-ldap --with-libedit --with-readline --with-snmp --with-sodium --with-xsl --with-zip
Operating System:
Ubuntu 20.04 Host, Docker 0599jiangyc/flowfusion:latest
This report is automatically generated by FlowFusion
PHP Version
nightly
Operating System
No response
Activity
devnexen commentedon Feb 14, 2025
It is an underflow issue occuring in php_resolve_path when looking for the last slash in script name which in this case there is none.