<?php
/* XD-001 PoC victim. Prints its PID, then busy-loops calling a
 * user function so xdebug's per-statement tick fires and
 * dispatches incoming control-socket connections.
 *
 * Run under xdebug.mode=develop with xdebug.control_socket=default.
 */

echo "pid=" . getmypid() . "\n";
flush();

function tick()
{
    /* user function call -> xdebug_execute_ex ->
     * xdebug_control_socket_dispatch */
    return 1;
}

$end = microtime(true) + 8;
while (microtime(true) < $end) {
    for ($i = 0; $i < 100; $i++) {
        tick();
    }
    usleep(1000);
}