Skip to content

PHP-7.4-CVE-2026-109618-109619 causes tests/lang/bug45293.phpt to fail #24599

Closed as not planned

Description

@pqarmitage

Description

When running make test on the head of branch PHP-7.4-CVE-2026-109618-109619, tests/lang/bug45392.phpt fails. Reverting the commit that resolve the CVEs makes the test pass again (commit 712e60f).

Resulted in this output:

===================================================================
PHP         : /home/quentin/Downloads/php-7.4.34/sapi/cli/php
PHP_SAPI    : cli
PHP_VERSION : 7.4.27-dev
ZEND_VERSION: 3.4.0
PHP_OS      : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019 x86_64
INI actual  : /home/quentin/Downloads/php-7.4.34
More .INIs  :
---------------------------------------------------------------------
PHP         : /home/quentin/Downloads/php-7.4.34/sapi/phpdbg/phpdbg
PHP_SAPI    : phpdbg
PHP_VERSION : 7.4.27-dev
ZEND_VERSION: 3.4.0
PHP_OS      : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019 x86_64
INI actual  : /home/quentin/Downloads/php-7.4.34
More .INIs  :
---------------------------------------------------------------------
CWD         : /home/quentin/Downloads/php-7.4.34
Extra dirs  :
VALGRIND    : Not used
=====================================================================
Running selected tests.
FAIL Bug #45392 (ob_start()/ob_end_clean() and memory_limit) [tests/lang/bug45392.phpt]
=====================================================================
Number of tests :    1                 1
Tests skipped   :    0 (  0.0%) --------
Tests warned    :    0 (  0.0%) (  0.0%)
Tests failed    :    1 (100.0%) (100.0%)
Tests passed    :    0 (  0.0%) (  0.0%)
---------------------------------------------------------------------
Time taken      :    0 seconds
=====================================================================

=====================================================================
FAILED TEST SUMMARY
---------------------------------------------------------------------
Bug #45392 (ob_start()/ob_end_clean() and memory_limit) [tests/lang/bug45392.phpt]
=====================================================================

But I expected this output instead:

===================================================================
PHP         : /home/quentin/Downloads/php-7.4.34/sapi/cli/php
PHP_SAPI    : cli
PHP_VERSION : 7.4.27-dev
ZEND_VERSION: 3.4.0
PHP_OS      : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019 x86_64
INI actual  : /home/quentin/Downloads/php-7.4.34
More .INIs  :
---------------------------------------------------------------------
PHP         : /home/quentin/Downloads/php-7.4.34/sapi/phpdbg/phpdbg
PHP_SAPI    : phpdbg
PHP_VERSION : 7.4.27-dev
ZEND_VERSION: 3.4.0
PHP_OS      : Linux - Linux localhost-live 5.3.7-301.fc31.x86_64 #1 SMP Mon Oct 21 19:18:58 UTC 2019 x86_64
INI actual  : /home/quentin/Downloads/php-7.4.34
More .INIs  :
---------------------------------------------------------------------
CWD         : /home/quentin/Downloads/php-7.4.34
Extra dirs  :
VALGRIND    : Not used
=====================================================================
Running selected tests.
PASS Bug #45392 (ob_start()/ob_end_clean() and memory_limit) [tests/lang/bug45392.phpt]
=====================================================================
Number of tests :    1                 1
Tests skipped   :    0 (  0.0%) --------
Tests warned    :    0 (  0.0%) (  0.0%)
Tests failed    :    0 (  0.0%) (  0.0%)
Tests passed    :    1 (100.0%) (100.0%)
---------------------------------------------------------------------
Time taken      :    0 seconds
=====================================================================

PHP Version

PHP 7.4.27-dev (cli) (built: Oct 23 2026 12:45:03) ( NTS )
Copyright (c) The PHP Group
Zend Engine v3.4.0, Copyright (c) Zend Technologies

This is actually commit 712e60f9edfd03f0960fc4fc3c2c375f42b90aa2 on the 7.4-CVE-2026-109618-109619 branch.

I am aware that version 7.4 is no longer supported, but I thought that I ought to report this since it appears to be an issue with the commit to resolve the CVEs.

Operating System

Fedora 31

Activity

  1. iluuu1994 commented on Oct 23, 2026

    @iluuu1994
    Member

    7.4 is out of support. We only provided patches for these versions to help out distributions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions