archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-15 13:38:49 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fuzzer: Gracefully handle hashes that cannot be serialized

Browse source
This commit is contained in:
Nikita Popov 2021-01-11 15:44:42 +01:00
parent c7fe18aca6
commit 3b542021e4
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
sapi/fuzzer/generate_unserializehash_corpus.php
View file

@ -6,5 +6,11 @@ $corpusDir = __DIR__ . '/corpus/unserializehash';
foreach (hash_algos() as $algo) {
$ctx = hash_init($algo);
$algx = preg_replace('/[^-_a-zA-Z0-9]/', '_', $algo);
file_put_contents($corpusDir . '/' . $algx, "x|" . serialize($ctx));
try {
$serialized = serialize($ctx);
} catch (Exception $e) {
echo "Hash algorithm $algo could not be serialized.\n";
continue;
}
file_put_contents($corpusDir . '/' . $algx, "x|" . $serialized);
}