Wrap cleanup function call with zend_try.

Fizes oss-fuzz #65911

Use a single version of mempcpy(3) (#12257)

While __php_mempcpy is only used by ext/standard/crypt_sha*, the
mempcpy "pattern" is used everywhere.

This commit removes __php_memp

Use a single version of mempcpy(3) (#12257)

While __php_mempcpy is only used by ext/standard/crypt_sha*, the
mempcpy "pattern" is used everywhere.

This commit removes __php_mempcpy, adds zend_mempcpy and transforms
open-coded parts into function calls.

show more ...

Fix -Wstrict-prototypes warnings in fuzzer SAPI (#11277)

Make fuzzer respect ZEND_MMAP_AHEAD

Fixes oss-fuzz #55654

main/SAPI: make "ini_entries" a const string

Refacto php_module_startup() (#8303)

It only ever uses at most 1 additional modules

Disable chdir in execute fuzzers

We don't want the current working directory to change during
fuzzing, as that breaks corpus access unless an absolute path is
used. I'm not sure why

Disable chdir in execute fuzzers

We don't want the current working directory to change during
fuzzing, as that breaks corpus access unless an absolute path is
used. I'm not sure why this issue never came up before.

show more ...

Add fuzzer for function JIT

This is a basic fuzzer for the function JIT, which looks for
crashes and sanitizer violations only, and does not try to detect
differing behavior yet.

Fix strict-prototypes warning

Update http->https in license (#6945)

1. Update: http://www.php.net/license/3_01.txt to https, as there is anyway server header "Location:" to https.
2. Update few license 3.0 to 3.01 as

Update http->https in license (#6945)

1. Update: http://www.php.net/license/3_01.txt to https, as there is anyway server header "Location:" to https.
2. Update few license 3.0 to 3.01 as 3.0 states "php 5.1.1, 4.1.1, and earlier".
3. In some license comments is "at through the world-wide-web" while most is without "at", so deleted.
4. fixed indentation in some files before |

show more ...

Destroy file handle earlier in execute fuzzer

I'm not quite sure why this is relevant, but if matches what other
code does and fixes oss-fuzz #32517.

Free static variables in execute fuzzer

Fixes a leak in the seed corpus.

Change Zend Stream API to use zend_string* instead of char*.

This allows to eliminate re-calculation of string lenght and hash value.
See the detailed list of changes in UPGRADING.INTERN

Change Zend Stream API to use zend_string* instead of char*.

This allows to eliminate re-calculation of string lenght and hash value.
See the detailed list of changes in UPGRADING.INTERNALS.

show more ...

Replace zend_bool uses with bool

We're starting to see a mix between uses of zend_bool and bool.
Replace all usages with the standard bool type everywhere.

Of course, zend_bool

Replace zend_bool uses with bool

We're starting to see a mix between uses of zend_bool and bool.
Replace all usages with the standard bool type everywhere.

Of course, zend_bool is retained as an alias.

show more ...

Disable InfiniteIterator class while fuzzing

The combination of LimitIterator and InfiniteIterator can cause
effectively infinite loops that bypass the executor step limit.

Extend function blacklist in execute fuzzer

Add pfsockopen and stream_socket_server.

Fix typo

This was supposed to include the header, not the C file...

Generate execute corpus in generate_all.php

And add crypt() to the function blacklist, it can be very slow.

Add experimental "execute" fuzzer

This is an end-to-end fuzzer that executes arbitrary PHP code.

We replace the executor with a finite-step executor to avoid
getting stuck in lo

Add experimental "execute" fuzzer

This is an end-to-end fuzzer that executes arbitrary PHP code.

We replace the executor with a finite-step executor to avoid
getting stuck in loops or recursion.

show more ...

Extract some common fuzzer code

Constify char * arguments of APIs

Closes GH-5676.

Fix #78880: Spelling error report

We fix the most often occuring typos according to a recent codespell
report[1] in tests, code comments and documentation.

[1] <https://fossies.

Fix #78880: Spelling error report

We fix the most often occuring typos according to a recent codespell
report[1] in tests, code comments and documentation.

[1] <https://fossies.org/linux/test/php-src-master-f8f48ce.191129.tar.gz/codespell.html>.

show more ...

Reduce oniguruma retry limit in fuzzer

For some patterns matching may take quite long even at retry limit
100000 and it seems that this is not easy to fix on the oniguruma
side.

Reduce oniguruma retry limit in fuzzer

For some patterns matching may take quite long even at retry limit
100000 and it seems that this is not easy to fix on the oniguruma
side.

Reduce the retry limit by another factor of 10 in hope of reducing
timeouts.

show more ...

Reduce oniguruma limits in fuzzing sapi

The defaults are fairly conservative and may still take quite a
bit to match a single expression. Reduce them by a factor of 10x
to speed up f

Reduce oniguruma limits in fuzzing sapi

The defaults are fairly conservative and may still take quite a
bit to match a single expression. Reduce them by a factor of 10x
to speed up fuzzing.

show more ...

Limit max length for parser fuzzer

We're getting some very large inputs (~500KB) on OSS-Fuzz, which
slot down performance a lot. Let's try limiting this, starting
with a still fairly

Limit max length for parser fuzzer

We're getting some very large inputs (~500KB) on OSS-Fuzz, which
slot down performance a lot. Let's try limiting this, starting
with a still fairly large value of 64KB.

Also remove the max_execution_time limit, so that slow test cases
cause a genuine libfuzzer timeout and we may investigate them.

show more ...