#38493 [NEW]: xmlrpc_encode_request(666, array()) crashes php
| From: | giunta dot gaetano at sea-aeroportimilano dot it | Date: | Fri, 18 Aug 2006 10:02:43 +0000 |
| Subject: | #38493 [NEW]: xmlrpc_encode_request(666, array()) crashes php | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-100926@lists.php.net to get a copy of this message | ||
From: giunta dot gaetano at sea-aeroportimilano dot it
Operating system: windows 2000
PHP version: 4.4.4
PHP Bug Type: XMLRPC-EPI related
Bug description: xmlrpc_encode_request(666, array()) crashes php
Description:
------------
xmlrpc_encode_request(666, array()) brings apache and php down in flames.
I know that a user would better not use this, but instead
xmlrpc_encode_request('666', array()), but
- the xmlrpc spec allows method names to be made of numbers only
- php is weakly typed
- a php error msg would be better than a php crash anyway
BTW: the bug is on line 674 of xmlrpc-epi.php.c (as of 4.4.3), where the
zval string value is used without proper checking for its type first.
Afaict a cast to string before using the value would fix it.
--
Edit bug report at http://bugs.php.net/?id=38493&edit=1
--
Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=38493&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=38493&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=38493&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=38493&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=38493&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=38493&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=38493&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=38493&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=38493&r=support
Expected behavior: http://bugs.php.net/fix.php?id=38493&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=38493&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=38493&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=38493&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38493&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=38493&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=38493&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=38493&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=38493&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=38493&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=38493&r=mysqlcfg