c15988aab3
This makes the tests independent of each other and allows them to be run in parallel. Co-authored-by: Gina Peter Banyard <girgias@php.net>
30 lines
704 B
PHP
30 lines
704 B
PHP
--TEST--
|
|
Bug #81720 (Uninitialized array in pg_query_params() leading to RCE)
|
|
--EXTENSIONS--
|
|
pgsql
|
|
--SKIPIF--
|
|
<?php include("inc/skipif.inc"); ?>
|
|
--FILE--
|
|
<?php
|
|
include('inc/config.inc');
|
|
|
|
$conn = pg_connect($conn_str);
|
|
|
|
try {
|
|
pg_query_params($conn, 'SELECT $1, $2', [1, new stdClass()]);
|
|
} catch (Throwable $ex) {
|
|
echo $ex->getMessage(), PHP_EOL;
|
|
}
|
|
|
|
try {
|
|
pg_send_prepare($conn, "my_query", 'SELECT $1, $2');
|
|
pg_get_result($conn);
|
|
pg_send_execute($conn, "my_query", [1, new stdClass()]);
|
|
} catch (Throwable $ex) {
|
|
echo $ex->getMessage(), PHP_EOL;
|
|
}
|
|
?>
|
|
--EXPECT--
|
|
Object of class stdClass could not be converted to string
|
|
Object of class stdClass could not be converted to string
|