Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

onig_new_deluxe() function usage in PHP and Ruby #153

Open
marcinguy opened this issue Sep 8, 2019 · 3 comments

Comments

@marcinguy
Copy link

commented Sep 8, 2019

Hi,

Looked though PHP source and found that it actually uses only onig_new() in mb_* functions. Do you know how can I use onig_new_deluxe() in PHP?

Is the situation the same in Ruby? Do you know it?

What is the purpose of onig_new_deluxe()?

Thanks,

@marcinguy

This comment has been minimized.

Copy link
Author

commented Sep 8, 2019

Actually looked it up also in Ruby (2.5.1), and I was only able to see the onig_new() function in Debugger also.

So how and when is onig_new_deluxe() used in PHP and Ruby?

Thanks,

@marcinguy

This comment has been minimized.

Copy link
Author

commented Sep 9, 2019

I doubt it is used by default in PHP, Ruby. My investigation showed the onig_new_deluxe() is not used by default. However, modified PHP and fuzzed it and was able to reproduce UAF in 7 mins :)

@kkos

This comment has been minimized.

Copy link
Owner

commented Sep 10, 2019

  • First comment:
    I'm not a PHP developer so there is no answer.
    Ruby has been using another regular expression library for quite some time, so it has nothing to do with me.

  • Third comment:
    If I have a problem to fix, I need to know the following items:

    -- Oniguruma version / or master branch
    -- character encoding
    -- regex pattern
    -- subject string
    -- options

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants
You can’t perform that action at this time.