Test: /ext/curl/tests/bug69316.phpt - Version 7.4.21        

Security #69316 Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER
Submitted: 2015-03-27 12:05:59 Modified: 2015-04-14 07:28:04
From: bugs Assigned: stas
Status: Closed Package: cURL related
PHP Version: Irrelevant OS: Linux, Windows

There are 2 different diffs reported by users for this test.

Count Diff
1 (50%)
002+ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> 003+ <html> 004+ <head> 005+ <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> 006+ <title>Connection to server failed</title> 007+ <style type="text/css"> 008+ <!-- 002- array(1) { 003- ["test"]=> 004- string(7) "getpost" 005- } 006- array(0) { 007- } 008- ===DONE=== 009+ body { 010+ font-family: sans-serif; 011+ padding: 1em; 012+ } 013+ .mainBody { 014+ max-width: 600px; 015+ margin: auto; 016+ } 017+ .header { 018+ border-bottom: 3px solid #e73a27; 019+ line-height: 1.5em; 020+ padding-bottom: 1em; 021+ } 022+ h1 { 023+ color: #808080; 024+ font-size: 1.5em; 025+ line-height: 1em; 026+ } 027+ span { 028+ color: #000000; 029+ font-size: 1em; 030+ } 031+ .footer { 032+ text-align: right; 033+ padding-top: 3px; 034+ color: #808080; 035+ font-weight: bold; 036+ } 037+ .footer i { 038+ font-style: normal; 039+ } 040+ .nocss { 041+ display: none; 042+ } 043+ --> 044+ </style> 045+ </head> 046+ <body> 047+ <div class="mainBody"> 048+ <div class="header"> 049+ <h1>Connection to server failed</h1> 050+ <span>Connection actively refused by the server</span> 051+ </div> 052+ <div class="footer"><span class='nocss'><br /></span><i>This message was created by Kerio Control Proxy</i></div> 053+ </div> 054+ </body> 055+ </html> 056+ ===DONE===
1 (50%)
001+ Server is not running 001- Warning: curl_exec(): CURLOPT_FILE resource has gone away, resetting to default in %s on line %d 002- array(1) { 003- ["test"]=> 004- string(7) "getpost" 005- } 006- array(0) { 007- } 008- ===DONE===