mirror of
https://github.com/php/php-src.git
synced 2024-09-21 18:07:23 +00:00
429f194f40
By nulling out the function_handler, so it will not get used below. Reuse the existing helper for this purpose.
28 lines
459 B
PHP
28 lines
459 B
PHP
--TEST--
|
|
is_callable() with trampoline should not caused UAF
|
|
--FILE--
|
|
<?php
|
|
|
|
class B {}
|
|
class A extends B {
|
|
public function bar($func) {
|
|
var_dump(is_callable(array('parent', 'foo')));
|
|
}
|
|
|
|
public function __call($func, $args) {
|
|
}
|
|
}
|
|
|
|
class X {
|
|
public static function __callStatic($func, $args) {
|
|
}
|
|
}
|
|
|
|
$a = new A();
|
|
// Extra X::foo() wrapper to force use of allocated trampoline.
|
|
X::foo($a->bar('foo'));
|
|
|
|
?>
|
|
--EXPECT--
|
|
bool(false)
|