Commit 6e215f882e3 for php
commit 6e215f882e3e1d25614f73da63fbffab7def0e99
Author: Yuma Kakei <yumasansansan@gmail.com>
Date: Tue Oct 27 02:55:05 2026 +0900
Fix tempnam() not being disabled in the fuzzer SAPI (#24719)
The disable_functions list contains "tempname", which does not exist,
so tempnam() stays available and fuzz inputs can create files in /tmp.
diff --git a/sapi/fuzzer/fuzzer-sapi.c b/sapi/fuzzer/fuzzer-sapi.c
index b36f74ec095..53172cc7b26 100644
--- a/sapi/fuzzer/fuzzer-sapi.c
+++ b/sapi/fuzzer/fuzzer-sapi.c
@@ -46,7 +46,7 @@ static const char HARDCODED_INI[] =
"disable_functions=dl,mail,mb_send_mail,set_error_handler"
",shell_exec,exec,system,proc_open,popen,passthru,pcntl_exec"
",chdir,chgrp,chmod,chown,copy,file_put_contents,lchgrp,lchown,link,mkdir"
- ",move_uploaded_file,rename,rmdir,symlink,tempname,touch,unlink,fopen"
+ ",move_uploaded_file,rename,rmdir,symlink,tempnam,touch,unlink,fopen"
/* Networking code likes to wait and wait. */
",fsockopen,pfsockopen"
",stream_socket_pair,stream_socket_client,stream_socket_server"