Maniphest T12538

PHP fatal error on page move with fuzz input
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	• bzimport
	Jul 11 2007, 8:59 AM

Tags

Referenced Files

None

Subscribers

• wikibugs-l-list

Description

Author: nickpj

Description:

On an SVN checkout wiki with error_reporting( E_ALL | E_STRICT ), and where anons can make page moves, getting this error:

<b>Fatal error</b>: Call to a member function getFullUrl() on a non-object in <b>includes/SpecialMovepage.php</b> on line <b>277</b><br />

On this fuzz test:

curl --silent --include --globoff -F 'action'='success' -F 'target'='\x3cTR lang=\x3c/hiero' 'http://localhost/wiki/index.php?title=Special:Movepage'

Version: 1.11.x
Severity: trivial

Details

Reference: bz10538

Event Timeline

• bzimport raised the priority of this task from to Low.Nov 21 2014, 9:48 PM

• bzimport added a project: MediaWiki-Special-pages.

• bzimport set Reference to bz10538.

• bzimport added a subscriber: Unknown Object (MLST).

• bzimport created this task.Jul 11 2007, 8:59 AM

Fixed in r24035, now throws a graceful bad title error.