PHP  
 PHP_HEAD
downloads | QA | documentation | faq | getting help | mailing lists | reporting bugs | php.net sites | links | my php.net 
 

Valgrind Report for sapi/cli/tests/bug70264.phpt ('Bug #70264 (CLI server directory traversal)')

Script

1: <?php
2:
include "php_cli_server.inc";
3:
php_cli_server_start(nullnull);
4: echo 
file_get_contents("http://" PHP_CLI_SERVER_ADDRESS "/..\\CREDITS");
5: echo 
file_get_contents("http://" PHP_CLI_SERVER_ADDRESS "/..%5CCREDITS");
6:
?>
7:

Report

==17832== Jump to the invalid address stated on the next line
==17832==    at 0x4FE: ???
==17832==    by 0xD8FCF8F: ??? (in /lib64/libkrb5.so.3.3)
==17832==    by 0x400F2DB: _dl_name_match_p (in /lib64/ld-2.12.so)
==17832==    by 0x4009C04: do_lookup_x (in /lib64/ld-2.12.so)
==17832==    by 0x400A269: _dl_lookup_symbol_x (in /lib64/ld-2.12.so)
==17832==    by 0x400BAB3: _dl_relocate_object (in /lib64/ld-2.12.so)
==17832==    by 0x4003A08: dl_main (in /lib64/ld-2.12.so)
==17832==    by 0x401640D: _dl_sysdep_start (in /lib64/ld-2.12.so)
==17832==    by 0x40014D3: _dl_start (in /lib64/ld-2.12.so)
==17832==    by 0x4000B37: ??? (in /lib64/ld-2.12.so)
==17832==    by 0x5: ???
==17832==    by 0x1FFF00077A: ???
==17832==  Address 0x4fe is not stack'd, malloc'd or (recently) free'd
==17832== 
==17832== 
==17832== Process terminating with default action of signal 11 (SIGSEGV)
==17832==  Bad permissions for mapped region at address 0x4FE
==17832==    at 0x4FE: ???
==17832==    by 0xD8FCF8F: ??? (in /lib64/libkrb5.so.3.3)
==17832==    by 0x400F2DB: _dl_name_match_p (in /lib64/ld-2.12.so)
==17832==    by 0x4009C04: do_lookup_x (in /lib64/ld-2.12.so)
==17832==    by 0x400A269: _dl_lookup_symbol_x (in /lib64/ld-2.12.so)
==17832==    by 0x400BAB3: _dl_relocate_object (in /lib64/ld-2.12.so)
==17832==    by 0x4003A08: dl_main (in /lib64/ld-2.12.so)
==17832==    by 0x401640D: _dl_sysdep_start (in /lib64/ld-2.12.so)
==17832==    by 0x40014D3: _dl_start (in /lib64/ld-2.12.so)
==17832==    by 0x4000B37: ??? (in /lib64/ld-2.12.so)
==17832==    by 0x5: ???
==17832==    by 0x1FFF00077A: ???

 

Generated at Sun, 12 Nov 2017 21:17:35 +0000 (6 days ago)

Copyright © 2005-2017 The PHP Group
All rights reserved.