php IHDR w Q )Ba pHYs sRGB gAMA a IDATxMk\U s&uo,mD )Xw+e?tw.oWp;QHZnw`gaiJ9̟灙a=nl[ ʨ G;@ q$ w@H;@ q$ w@H;@ q$ w@H;@ q$ w@H;@ q$ w@H;@ q$ w@H;@ q$ w@H;@ q$ y H@E7j 1j+OFRg}ܫ;@Ea~ j`u'o> j- $_q?qS XzG'ay
files >> /opt/php-7.0.1/ext/fileinfo/tests/ |
files >> //opt/php-7.0.1/ext/fileinfo/tests/cve-2014-1943.phpt |
--TEST-- Bug #66731: file: infinite recursion --SKIPIF-- <?php if (!class_exists('finfo')) die('skip no fileinfo extension'); --FILE-- <?php $fd = __DIR__.'/cve-2014-1943.data'; $fm = __DIR__.'/cve-2014-1943.magic'; $a = "\105\122\000\000\000\000\000"; $b = str_repeat("\001", 250000); $m = "0 byte x\n". ">(1.b) indirect x\n"; file_put_contents($fd, $a); $fi = finfo_open(FILEINFO_NONE); var_dump(finfo_file($fi, $fd)); finfo_close($fi); file_put_contents($fd, $b); file_put_contents($fm, $m); $fi = finfo_open(FILEINFO_NONE, $fm); var_dump(finfo_file($fi, $fd)); finfo_close($fi); ?> Done --CLEAN-- <?php @unlink(__DIR__.'/cve-2014-1943.data'); @unlink(__DIR__.'/cve-2014-1943.magic'); ?> --EXPECTF-- string(%d) "%s" Warning: finfo_file(): Failed identify data 0:indirect recursion nesting (%d) exceeded in %s on line %d bool(false) Doney~or5J={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy Rg/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qFvM IENDB`