[wp-trac] [WordPress Trac] #39945: WP_Query::get_posts fails to correctly sanitize 'posts_per_page'

[WordPress Trac]

#39945: WP_Query::get_posts fails to correctly sanitize 'posts_per_page'
-------------------------------------------------+-------------------------
 Reporter:  biisent                              |       Owner:
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
Component:  Query                                |  Review
 Severity:  normal                               |     Version:  4.7.2
 Keywords:  has-patch needs-testing 2nd-opinion  |  Resolution:
                                                 |     Focuses:
-------------------------------------------------+-------------------------

Comment (by bernsteina):

 You can also overflow to get a float.
 i.e. -9223372036854775808 on 64-bit servers and -2147483648 on 32-bit

 `WordPress database error:`
 [...]
 `ASC LIMIT 0, 9.2233720368548E+18`

--
Ticket URL: <https://core.trac.wordpress.org/ticket/39945#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform