Code:  PHP_FUNCTION(linkinfo)
 {
 	char *link;
 	size_t link_len;
 	zend_stat_t sb;
 	int ret;

	if (zend_parse_parameters(ZEND_NUM_ARGS(), "p", &link, &link_len) == FAILURE) {
 		return;
 	}
 
 	ret = VCWD_STAT(link, &sb);
 	if (ret == -1) {
 		php_error_docref(NULL, E_WARNING, "%s", strerror(errno));
 		RETURN_LONG(Z_L(-1));
 	}
 
 	RETURN_LONG((zend_long) sb.st_dev);
 }

Vulnerability Type: +Info 
CWE ID: CWE-200
Summary: An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.
Commit Message: Fixed bug #76459 windows linkinfo lacks openbasedir check