1--TEST-- 2Bug #71323: Output of stream_get_meta_data can be falsified by its input 3--FILE-- 4<?php 5$file = 'data:text/plain;z=y;uri=eviluri;mediatype=wut?;mediatype2=hello,somedata'; 6$meta = stream_get_meta_data(fopen($file, "r")); 7var_dump($meta); 8?> 9--EXPECTF-- 10array(10) { 11 ["mediatype"]=> 12 string(10) "text/plain" 13 ["z"]=> 14 string(1) "y" 15 ["uri"]=> 16 string(72) "data:text/plain;z=y;uri=eviluri;mediatype=wut?;mediatype2=hello,somedata" 17 ["mediatype2"]=> 18 string(5) "hello" 19 ["base64"]=> 20 bool(false) 21 ["wrapper_type"]=> 22 string(7) "RFC2397" 23 ["stream_type"]=> 24 string(7) "RFC2397" 25 ["mode"]=> 26 string(1) "r" 27 ["unread_bytes"]=> 28 int(0) 29 ["seekable"]=> 30 bool(true) 31} 32