Package home | Report new bug | New search | Development Roadmap Status: Open | Feedback | All | Closed Since Version 1.3.11
Bug #17853 Test failure: dirtraversal.phpt
Submitted: 2010-09-08 23:55 UTC Modified: 2011-04-05 08:19 UTC
From: doconnor Assigned: mrook
Status: Closed Package: Archive_Tar (version SVN)
PHP Version: 5.3.1 OS:
Roadmaps: 1.3.8    
Subscription  


 [2010-09-08 23:55 UTC] doconnor (Daniel O'Connor)
Description: ------------ http://test.pear.php.net:8080/cruisecontrol/buildresults/Archive_Tar?tab=testResults Test script: --------------- dirtraversal.phpt Expected result: ---------------- Tests pass Actual result: -------------- /home/clockwerx/packages-all/Archive_Tar/tests/dirtraversal.phpt --- Expected +++ Actual @@ @@ +Test Failure: "after 1" + in /home/clockwerx/packages-all/Archive_Tar/tests/dirtraversal.php line 8 +Unthrown error: +PEAR_Error: +message: "Malicious .tar detected, file "/../../../../../../../../../../../../../../AAAAAAAAAAAAAAAAA/BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.txt" will not install in desired directory tree" +Unexpected error: +PEAR_Error: +message: "Malicious .tar detected, file "/../../../../../../../../../../../../../../AAAAAAAAAAAAAAAAA/BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.txt" will not install in desired directory tree" +Test Failure: "after 2" + in /home/clockwerx/packages-all/Archive_Tar/tests/dirtraversal.php line 12 +Unthrown error: +PEAR_Error: +message: "Malicious .tar detected, file "/../../../../../../../../../../../../../../AAAAAAAAAAAAAAAAA/BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.txt" will not install in desired directory tree" +Unexpected error: +PEAR_Error: +message: "Malicious .tar detected, file "/../../../../../../../../../../../../../../AAAAAAAAAAAAAAAAA/BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.txt" will not install in desired directory tree" tests done

Comments

 [2010-09-08 23:57 UTC] doconnor (Daniel O'Connor)
Reading that test output, it looks like it really should fail exactly as described - ie: the test expectations just need updating.
 [2010-09-08 23:58 UTC] doconnor (Daniel O'Connor)
Alternatively; the setting of callbacks no longer functions the same as of PHP 5.3 PEAR::setErrorHandling(PEAR_ERROR_CALLBACK, array(&$this, 'pearerrorCallback')); if (!$noStackCatch) { PEAR_ErrorStack::setDefaultCallback(array(&$this, 'pearerrorstackCallback')); }
 [2011-04-05 08:19 UTC] mrook (Michiel Rook)
-Status: Open +Status: Closed -Assigned To: +Assigned To: mrook -Roadmap Versions: +Roadmap Versions: 1.3.8
This bug has been fixed in SVN. If this was a documentation problem, the fix will appear on pear.php.net by the end of next Sunday (CET). If this was a problem with the pear.php.net website, the change should be live shortly. Otherwise, the fix will appear in the package's next release. Thank you for the report and for helping us make PEAR better.