#40365 [NoF]: bug when using str_ireplace and unserialize

ID: 40365 Updated by: tony2001@php.net Reported By: rolf at insiders dot nl Status: No Feedback Bug Type: Strings related Operating System: Linux chewbacca 2.6.16-1-686-s PHP Version: 5.2.1RC4 New Comment: >Perhaps related? It's fixed in CVS. Previous Comments: ------------------------------------------------------------------------ [2007-02-14 12:11:16] franz at prisjakt dot nu I found this. Works on PHP 5.1.6 but segfaults with 5.2.1. Perhaps related? http://www.1x1.jp/blog/2007/02/php521_str_ireplace.html $Data = "Change tracking and management software designed to watch for abnormal system behavior.\nSuggest features, report bugs, or ask questions here."; $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); ------------------------------------------------------------------------ [2007-02-13 01:00:00] php-bugs at lists dot php dot net No feedback was provided for this bug for over a week, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to "Open". ------------------------------------------------------------------------ [2007-02-05 16:06:31] tony2001@php.net Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://snaps.php.net/win32/php5.2-win32-latest.zip Cannot reproduce. ------------------------------------------------------------------------ [2007-02-05 16:02:30] rolf at insiders dot nl Description: ------------ PHP version :PHP Version 5.2.1RC5-dev Build Date : Jan 29 2007 17:13:28 When I execute this code, I get a blank page. The log says : zend_mm_heap corrupted. The error only occurs when I call unserialize() after calling str_ireplace with the '§' character and a string of exactly 692 characters(I did not test all possible lengths). Any other combination compiles(for so far I tried). Reproduce code: --------------- <? $var1 = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"; $var2 = str_ireplace("§","xx",$var1); $ser = 'a:1:{i:0;s:1:"2";}'; $arr = unserialize($ser); echo "done"; ?> Expected result: ---------------- done ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=40365&edit=1