tests/php-stealmybitcoin.nix

Differential verification of the StealMyBitcoin exploit against the two PHP 8.4.25 builds filnix pins: Nixpkgs' unstripped PHP 8.4.25, on which the adapted PoC must succeed end to end (heap leak, code leak, forged HashTable, zif_system command execution), and pkgsFilc.php84_25, the same release under Fil-C, on which every run must die at the first corrupted session-id read with a Fil-C panic before a byte leaks (docs/php.md).

λpkgs, native, filc

let

The PoC's address constants are calibrated for these exact builds. A pin that moves off 8.4.25 stops being the vulnerable release this test is about, so say that at evaluation time instead of failing mysteriously.

16pin=

λname php

php.version ≢ "8.4.25"

→

throw"php-stealmybitcoin: the ${name} PHP is ${php.version}, not the vulnerable 8.4.25 this PoC is calibrated for"

else

php

used by filcPhp nativePhp

22nativePhp=

pin"native" native

uses pin

23filcPhp=