#41032 [NEW]: Backreferences are not escaped properly

From: phpcoder at cyberpimp dot sexventure dot com Operating system: Win98SE PHP version: 5.2.1 PHP Bug Type: PCRE related Bug description: Backreferences are not escaped properly Description: ------------ According to the documentation for preg_replace(), double-quotes, apostrophes/single-quotes, backslashes, and nulls are supposed to be returned escaped. However, only double-quotes and nulls are escaped; apostrophes/single-quotes and backslashes are returned in their original context. Reproduce code: --------------- <?php header('Content-Type: text/plain; charset=US-ASCII'); $inputstring="'\"\0\\"; echo preg_replace('/([\\x00-\\xFF])/e',"strlen('$1').' chars returned ($1)'.\"\r\n\"",$inputstring); ?> Expected result: ---------------- 2 chars returned (\') 2 chars returned (\") 2 chars returned (\0) 2 chars returned (\\) Actual result: -------------- 1 chars returned (') 2 chars returned (\") 2 chars returned (\0) 1 chars returned (\) -- Edit bug report at http://bugs.php.net/?id=41032&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=41032&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=41032&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=41032&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=41032&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=41032&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=41032&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=41032&r=needscript Try newer version: http://bugs.php.net/fix.php?id=41032&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=41032&r=support Expected behavior: http://bugs.php.net/fix.php?id=41032&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=41032&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=41032&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=41032&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=41032&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=41032&r=dst IIS Stability: http://bugs.php.net/fix.php?id=41032&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=41032&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=41032&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=41032&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=41032&r=mysqlcfg