Skip to content

Commit 6e215f8

Browse files
Fix tempnam() not being disabled in the fuzzer SAPI (#24719)
The disable_functions list contains "tempname", which does not exist, so tempnam() stays available and fuzz inputs can create files in /tmp.
1 parent 746a684 commit 6e215f8

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎sapi/fuzzer/fuzzer-sapi.c‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ static const char HARDCODED_INI[] =
4646
"disable_functions=dl,mail,mb_send_mail,set_error_handler"
4747
",shell_exec,exec,system,proc_open,popen,passthru,pcntl_exec"
4848
",chdir,chgrp,chmod,chown,copy,file_put_contents,lchgrp,lchown,link,mkdir"
49-
",move_uploaded_file,rename,rmdir,symlink,tempname,touch,unlink,fopen"
49+
",move_uploaded_file,rename,rmdir,symlink,tempnam,touch,unlink,fopen"
5050
/* Networking code likes to wait and wait. */
5151
",fsockopen,pfsockopen"
5252
",stream_socket_pair,stream_socket_client,stream_socket_server"

0 commit comments

Comments
 (0)