1--TEST-- 2Bug #79091 (heap use-after-free in session_create_id()) 3--EXTENSIONS-- 4session 5--FILE-- 6<?php 7class MySessionHandler implements SessionHandlerInterface, SessionIdInterface, SessionUpdateTimestampHandlerInterface 8{ 9 public function close(): bool 10 { 11 return true; 12 } 13 14 public function destroy($session_id): bool 15 { 16 return true; 17 } 18 19 public function gc($maxlifetime): int|false 20 { 21 return true; 22 } 23 24 public function open($save_path, $session_name): bool 25 { 26 return true; 27 } 28 29 public function read($session_id): string|false 30 { 31 return ''; 32 } 33 34 public function write($session_id, $session_data): bool 35 { 36 return true; 37 } 38 39 public function create_sid(): string 40 { 41 return uniqid(); 42 } 43 44 public function updateTimestamp($key, $val): bool 45 { 46 return true; 47 } 48 49 public function validateId($key): bool 50 { 51 return true; 52 } 53} 54 55ob_start(); 56var_dump(session_set_save_handler(new MySessionHandler())); 57var_dump(session_start()); 58ob_flush(); 59session_create_id(); 60?> 61--EXPECTF-- 62bool(true) 63bool(true) 64 65Warning: session_create_id(): Failed to create new ID in %s on line %d 66
