Files
php-src/ext/xml/tests/oom_xml_parse_into_struct.phpt
3584a98bda Avoid state corruption via bailout
- Replace bailout on OOM with UnwindExit
- Properly reset various globals that may be accessed during startup

Fix GHSA-w8hw-w9fx-j79w (CVE-2026-109618)
Fix GHSA-6wmf-4rv5-p3rp (CVE-2026-109619)

Co-authored-by: Ilija Tovilo <ilija.tovilo@me.com>
Co-authored-by: Jakub Zelenka <bukka@php.net>
Co-authored-by: Nora Dossche <7771979+ndossche@users.noreply.github.com>
Co-authored-by: Nicolas Grekas <nicolas.grekas@gmail.com>
2026-10-21 16:06:22 +02:00

17 lines
457 B
PHP

--TEST--
xml_parse_into_struct() doesn't reach hard limit
--EXTENSIONS--
xml
--INI--
memory_limit=8M
--FILE--
<?php
// 2 MB == memory_limit / 4, as 512K empty elements
$data = "<r>" . str_repeat("<a/>", 512 * 1024) . "</r>";
$parser = xml_parser_create();
xml_parse_into_struct($parser, $data, $values, $index);
echo "not reached\n";
?>
--EXPECTF--
Fatal error: Allowed memory size of 8388608 bytes exhausted %S(tried to allocate %d bytes) in %s on line %d