Files
php-src/ext/json/tests/json_encode_oom_string_prealloc.phpt
3584a98bda Avoid state corruption via bailout
- Replace bailout on OOM with UnwindExit
- Properly reset various globals that may be accessed during startup

Fix GHSA-w8hw-w9fx-j79w (CVE-2026-109618)
Fix GHSA-6wmf-4rv5-p3rp (CVE-2026-109619)

Co-authored-by: Ilija Tovilo <ilija.tovilo@me.com>
Co-authored-by: Jakub Zelenka <bukka@php.net>
Co-authored-by: Nora Dossche <7771979+ndossche@users.noreply.github.com>
Co-authored-by: Nicolas Grekas <nicolas.grekas@gmail.com>
2026-10-21 16:06:22 +02:00

14 lines
393 B
PHP

--TEST--
json_encode() string pre-allocation doesn't reach hard limit
--INI--
memory_limit=32M
memory_hard_limit_percent=110
--FILE--
<?php
// The hard limit is lowered to 110% to keep the test cheap
$subject = str_repeat("a", 20 * 1024 * 1024);
json_encode($subject);
?>
--EXPECTF--
Fatal error: Allowed memory size of 33554432 bytes exhausted %S(tried to allocate %d bytes) in %s on line %d