#39380 [NEW]: php crashes in preg_match

From: corinl at gmx dot de Operating system: linux debian PHP version: 5.2.0 PHP Bug Type: Scripting Engine problem Bug description: php crashes in preg_match Description: ------------ running the reproduce code crashes php 5.1.6 and 5.2.0 with a segmentation fault. -- (gdb) set args php_crash.php (gdb) run Starting program: /usr/bin/php php_crash.php [Thread debugging using libthread_db enabled] [New Thread -1486911808 (LWP 25359)] ok1 Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1486911808 (LWP 25359)] 0x080b167d in match ( eptr=0xa73d1542 "t; schwierig<br />\r\n&gt;&lt; seltsam &gt;&lt; sensibel &gt;&lt; spontan &gt;&lt; stur &gt;&lt; t&auml;towiert &gt;&lt; treu &gt;&lt; unberechenbar <br />\r\n\r\n&gt;&lt; unentschlossen &gt;&lt;ungeduldig&"..., ecode=0x880b9a8 ";", offset_top=2, md=0xaf9e2620, ims=4, eptrb=0xaf1e8558, flags=2, rdepth=6454) at /usr/local/src/php-5.2.0/ext/pcre/pcrelib/pcre_exec.c:554 554 utf8 = md->utf8; /* Local copy of the flag */ (gdb) Reproduce code: --------------- http://www.netskin.de/download/php_crash.php.txt Expected result: ---------------- ok1 ok2 Actual result: -------------- ok1 -> crashes before echo('ok2') -- Edit bug report at http://bugs.php.net/?id=39380&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=39380&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=39380&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=39380&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=39380&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=39380&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=39380&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=39380&r=needscript Try newer version: http://bugs.php.net/fix.php?id=39380&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=39380&r=support Expected behavior: http://bugs.php.net/fix.php?id=39380&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=39380&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=39380&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=39380&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=39380&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=39380&r=dst IIS Stability: http://bugs.php.net/fix.php?id=39380&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=39380&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=39380&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=39380&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=39380&r=mysqlcfg