bug_41125.phpt 1.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051
  1. --TEST--
  2. Bug #41125 (PDO mysql + quote() + prepare() can result in segfault)
  3. --SKIPIF--
  4. <?php
  5. require_once(dirname(__FILE__) . DIRECTORY_SEPARATOR . 'skipif.inc');
  6. require_once(dirname(__FILE__) . DIRECTORY_SEPARATOR . 'mysql_pdo_test.inc');
  7. MySQLPDOTest::skip();
  8. $db = MySQLPDOTest::factory();
  9. $row = $db->query('SELECT VERSION() as _version')->fetch(PDO::FETCH_ASSOC);
  10. $matches = array();
  11. if (!preg_match('/^(\d+)\.(\d+)\.(\d+)/ismU', $row['_version'], $matches))
  12. die(sprintf("skip Cannot determine MySQL Server version\n"));
  13. $version = $matches[0] * 10000 + $matches[1] * 100 + $matches[2];
  14. die("skip $version");
  15. if ($version < 40100)
  16. die(sprintf("skip Need MySQL Server 5.0.0+, found %d.%02d.%02d (%d)\n",
  17. $matches[0], $matches[1], $matches[2], $version));
  18. ?>
  19. --FILE--
  20. <?php
  21. require_once(dirname(__FILE__) . DIRECTORY_SEPARATOR . 'mysql_pdo_test.inc');
  22. $db = MySQLPDOTest::factory();
  23. $db->exec("DROP TABLE IF EXISTS test");
  24. // And now allow the evil to do his work
  25. $db->setAttribute(PDO::ATTR_EMULATE_PREPARES, 1);
  26. $sql = "CREATE TABLE IF NOT EXISTS test(id INT); INSERT INTO test(id) VALUES (1); SELECT * FROM test; INSERT INTO test(id) VALUES (2); SELECT * FROM test;";
  27. // NOTE: This will fail, it is OK to fail - you must not mix DML/DDL and SELECT
  28. // The PDO API does not support multiple queries properly!
  29. // Read http://blog.ulf-wendel.de/?p=192
  30. // Compare MySQL C-API documentation
  31. $stmt = $db->query($sql);
  32. do {
  33. var_dump($stmt->fetchAll());
  34. } while ($stmt->nextRowset());
  35. print "done!";
  36. ?>
  37. --CLEAN--
  38. <?php
  39. require dirname(__FILE__) . '/mysql_pdo_test.inc';
  40. $db = MySQLPDOTest::factory();
  41. $db->exec("DROP TABLE IF EXISTS test");
  42. ?>
  43. --EXPECTF--
  44. Warning: PDOStatement::fetchAll(): SQLSTATE[HY000]: General error in %s on line %d
  45. array(0) {
  46. }
  47. done!