iconv_set_encoding-charset-length-cve-2007-4840.phpt 787 B

123456789101112131415161718192021
  1. --TEST--
  2. iconv_set_encoding() charset parameter length checks (CVE-2007-4840)
  3. --SKIPIF--
  4. <?php extension_loaded('iconv') or die('skip iconv extension is not available'); ?>
  5. --FILE--
  6. <?php
  7. $a = str_repeat("/", 9000000);
  8. var_dump(iconv_set_encoding("input_encoding", $a));
  9. var_dump(iconv_set_encoding("output_encoding", $a));
  10. var_dump(iconv_set_encoding("internal_encoding", $a));
  11. ?>
  12. --EXPECTF--
  13. Warning: iconv_set_encoding(): Charset parameter exceeds the maximum allowed length of %d characters in %s on line %d
  14. bool(false)
  15. Warning: iconv_set_encoding(): Charset parameter exceeds the maximum allowed length of %d characters in %s on line %d
  16. bool(false)
  17. Warning: iconv_set_encoding(): Charset parameter exceeds the maximum allowed length of %d characters in %s on line %d
  18. bool(false)