�PNG �JFIF��

🗂️ simple

Path: big/SRC/php-8.4.5/tests/basic/

✏️ Editing: GHSA-9pqp-7h25-4f32.phpt

--TEST--
GHSA-9pqp-7h25-4f32
--SKIPIF--
<?php
if (!getenv('TEST_PHP_CGI_EXECUTABLE')) {
 die("skip php-cgi not available");
}
if (substr(PHP_OS, 0, 3) == 'WIN') {
 die("skip not for Windows in CI - probably resource issue");
}
?>
--FILE--
<?php

const FILLUNIT = 5 * 1024;

function test($boundaryLen) {
    printf("Boundary len: %d\n", $boundaryLen);

$cmd = [
        getenv('TEST_PHP_CGI_EXECUTABLE'),
        '-C',
        '-n',
        __DIR__ . '/GHSA-9pqp-7h25-4f32.inc',
    ];

$boundary = str_repeat('A', $boundaryLen);
    $body = ""
        . "--$boundary\r\n"
        . "Content-Disposition: form-data; name=\"koko\"\r\n"
        . "\r\n"
        . "BBB\r\n--" . substr($boundary, 0, -1) . "CCC\r\n"
        . "--$boundary--\r\n"
        ;

$env = array_merge($_ENV, [
        'REDIRECT_STATUS' => '1',
        'CONTENT_TYPE' => "multipart/form-data; boundary=$boundary",
        'CONTENT_LENGTH' => strlen($body),
        'REQUEST_METHOD' => 'POST',
        'SCRIPT_FILENAME' => __DIR__ . '/GHSA-9pqp-7h25-4f32.inc',
    ]);

$spec = [
        0 => ['pipe', 'r'],
        1 => STDOUT,
        2 => STDOUT,
    ];

$pipes = [];

print "Starting...\n";

$handle = proc_open($cmd, $spec, $pipes, getcwd(), $env);

fwrite($pipes[0], $body);

$status = proc_close($handle);

print "\n";
}

for ($offset = -1; $offset <= 1; $offset++) {
 test(FILLUNIT - strlen("\r\n--") + $offset);
}

?>
--EXPECTF--
Boundary len: 5115
Starting...
X-Powered-By: %s
Content-type: text/html; charset=UTF-8

Hello world
array(1) {
  ["koko"]=>
  string(5124) "BBB
--AAA%sCCC"
}

Boundary len: 5116
Starting...
X-Powered-By: %s
Content-type: text/html; charset=UTF-8

Hello world
array(1) {
  ["koko"]=>
  string(5125) "BBB
--AAA%sCCC"
}

Boundary len: 5117
Starting...
X-Powered-By: %s
Content-type: text/html; charset=UTF-8

Warning: Boundary too large in multipart/form-data POST data in Unknown on line 0 
Hello world
array(0) {
}

🔙 Back