Test: /ext/phar/tests/bug79082.phpt - Version 7.4.8 
| Security #79082 | Files added to tar with Phar::buildFromIterator have all-access permissions | ||||
|---|---|---|---|---|---|
| Submitted: | 2020-01-08 17:42:25 | Modified: | 2020-02-17 08:21:07 | ||
| From: | dr | Assigned: | stas | ||
| Status: | Closed | Package: | PHAR related | ||
| PHP Version: | 7.2.27 | OS: | Ubuntu 16.04.6 LTS | ||
There are 3 different diffs reported by users for this test.
| Count | Diff |
|---|---|
2 (50%) |
002+
003+ Warning: PharData::buildFromIterator(/home/rsuzuki/tmp/php-7.4.8/ext/phar/tests/test79082.tar): failed to open stream: Permission denied in %s/bug79082.php on line 10
004+
005+ Fatal error: Uncaught PharException: unable to open new phar "/home/rsuzuki/tmp/php-7.4.8/ext/phar/tests/test79082.tar" for writing in %s/bug79082.php:10
006+ Stack trace:
007+ #0 %s/bug79082.php(10): PharData->buildFromIterator(Object(RecursiveDirectoryIterator), '/home/rsuzuki/t...')
008+ #1 {main}
009+ thrown in %s/bug79082.php on line 10
002- string(6) "100644"
003- string(6) "100400"
004- string(6) "100644"
005- string(6) "100400"
006- string(6) "100644"
007- string(6) "100400"
008- string(6) "100644"
009- string(6) "100400"
|
| 1 (25%) |
002+ string(6) "100777"
003+ string(6) "100555"
004+ string(6) "100777"
005+ string(6) "100555"
006+ string(6) "100777"
007+ string(6) "100555"
008+ string(6) "100777"
009+ string(6) "100555"
002- string(6) "100644"
003- string(6) "100400"
004- string(6) "100644"
005- string(6) "100400"
006- string(6) "100644"
007- string(6) "100400"
008- string(6) "100644"
009- string(6) "100400"
|
| 1 (25%) |
002+
003+ Warning: chmod(): Operation not permitted in %s/bug79082.php on line 4
004+
005+ Warning: chmod(): Operation not permitted in %s/bug79082.php on line 5
006+ string(6) "100666"
007+ string(6) "100666"
008+ string(6) "100666"
009+ string(6) "100666"
002- string(6) "100644"
003- string(6) "100400"
004- string(6) "100644"
005- string(6) "100400"
006- string(6) "100644"
007- string(6) "100400"
008- string(6) "100644"
009- string(6) "100400"
010+ string(6) "100666"
011+ string(6) "100666"
012+ string(6) "100666"
013+ string(6) "100666"
|