12345678910111213141516171819202122 |
- --TEST--
- Testing null byte injection in imagepng
- --EXTENSIONS--
- gd
- --SKIPIF--
- <?php
- $support = gd_info();
- if (!isset($support['PNG Support']) || $support['PNG Support'] === false) {
- print 'skip png support not available';
- }
- ?>
- --FILE--
- <?php
- $image = imagecreate(1,1);// 1px image
- try {
- imagepng($image, "./foo\0bar");
- } catch (TypeError $e) {
- echo $e->getMessage(), "\n";
- }
- ?>
- --EXPECT--
- imagepng(): Argument #2 ($file) must not contain null bytes
|