php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #67324 DateTime::createFromFormat wrong result
Submitted: 2014-05-22 11:42 UTC Modified: 2014-05-22 21:48 UTC
Votes:1
Avg. Score:1.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: volny dot licvin at gmail dot com Assigned:
Status: Wont fix Package: Date/time related
PHP Version: Irrelevant OS: Linux
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2014-05-22 11:42 UTC] volny dot licvin at gmail dot com
Description:
------------
DateTime::createFromFormat not checking properly provided format (day [01-31] and month [01-12] limitations) and only checking number of digits. 

Test script:
---------------
<?php
var_dump(DateTime::createFromFormat('Y-m-d', '9999-99-99'));

Expected result:
----------------
bool(false)

Actual result:
--------------
object(DateTime)#9 (3) {
  ["date"]=>
  string(20) "10007-06-07 13:28:21"
  ["timezone_type"]=>
  int(3)
  ["timezone"]=>
  string(13) "Europe/Berlin"
}


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-05-22 21:48 UTC] aharvey@php.net
-Status: Open +Status: Wont fix -Package: *General Issues +Package: Date/time related
 [2014-05-22 21:48 UTC] aharvey@php.net
createFromFormat(), like other functions that parse free text date strings, will wrap out of range values rather than generating errors, so long as they match the expected format (in terms of number of digits).
 
PHP Copyright © 2001-2018 The PHP Group
All rights reserved.
Last updated: Sat Nov 17 02:01:25 2018 UTC