Skip to content

COPY OF #224557 ext/phar: add upper-bound check on LongLink entry size - #24423

Merged
ndossche merged 1 commit into
php:masterfrom
crystarm:fix/phar-longlink
Oct 19, 2026
Merged

ndossche merged 1 commit into
php:masterfrom
crystarm:fix/phar-longlink

Conversation

@crystarm

Copy link
Copy Markdown
Contributor

Reopens #22557 after I accidentally deleted its source branch instead of force-pushing it, as explained in this comment.

Fixes #22556.

@ndossche
ndossche merged commit 857ac7f into php:master Oct 19, 2026
17 of 18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ext/phar: LongLink TAR entry causes ~4 GB allocation due to missing upper-bound check (DoS)

2 participants