frankenphp
fuzz: expand coverage to cgi.go parsing, response headers, and zval persistence
#2606
Merged

fuzz: expand coverage to cgi.go parsing, response headers, and zval persistence #2606

dunglas merged 6 commits into main from fuzz/expand-coverage
dunglas
dunglas test: fix wg.Done() leak on t.Skip/t.Fatalf in runTest goroutines
d51b3a5c
dunglas fuzz: add targets for cgi.go's path/addr parsing
641d1888
dunglas fuzz: add target for add_response_header
7febf3d0
dunglas security: cap persistent_zval nesting depth, add fuzz target
f0734f5f
dunglas security: fix Windows path traversal in sanitizedPathJoin
c5031dfc
dunglas security: neutralize backslash-smuggled traversal in sanitizedPathJoin
db421e92
alexandre-daubois
alexandre-daubois approved these changes on 2026-08-31
dunglas dunglas merged 2e334276 into main 1 day ago
dunglas dunglas deleted the fuzz/expand-coverage branch 1 day ago

Login to write a write a comment.

Login via GitHub

Reviewers
Assignees
No one assigned
Labels
Milestone