#41448 [NEW]: segmentation fault

From: whitephoenix at mail dot ru Operating system: CentOS 4.3 64-Bit PHP version: 5.2.2 PHP Bug Type: PCRE related Bug description: segmentation fault Description: ------------ The following source gives segfault on CentOS 4.3 64-Bit and PHP 5.2.2. Don't be scared, this regular expression is real parser for my templates-engine, and it works with other operation systems. The result depends on Subject, so with '$var' it works well, but if '$var[anything]' then crashes. Reproduce code: --------------- <?php echo 'proof of compilation'."\n"; preg_replace( '~(([\'"]).*?(?<!\\\\)\2|\w*\s*\(((?:(?R)|.)*?)\)' .'|[\$#]\w+#?(?:\\[(?:(?R)|((?:[^\\]\'"]*(?:([\'"]).*?(?<!\\\\)\5)?)*))*?\\]|\.[\$#]?\w+#?|->\s*[\$#]?\w+(?:\(((?:(?R)|.)*?)\))?)*' .'|-?\d+|(?<=^|[\s\)\:\.=+\-<>])(?:\w+)(?=$|[\s\|\.\:\(=+\-<>]))(\s+(?:is(?:\s+not)?\s+(?:odd|div|even)\s+by\s+-?\d+|is(?:\s+not)?\s+(?:odd|even)))?((?:\|@?\w+(?:\\:(?:'.'\w*\(((?:(?R)|.)*?)\)|[\$#]\w+#?(?:\\[(?:(?R)|((?:[^\\]\'"]*(?:([\'"]).*?(?<!\\\\)\11)?)*))*?\\]|\.[\$#]?\w+#?)*|[^\'"\:]*(?:[^\'"\:]*([\'"]).*?(?<!\\\\)\12[^\'"\:]*)*'.'))*)*)' .'|((?<=\s|\))(?:is\s+not|is|not\s+eq|eq|neq?|gt|lt|gt?e|ge|lt?e|mod)(?=\s|\()|(?:not\s+))' .'~si','any replacement','$var[index]'); Expected result: ---------------- "any replacement" Actual result: -------------- [root@72 _test]# php -q bug.php proof of compilation Segmentation fault -- Edit bug report at http://bugs.php.net/?id=41448&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=41448&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=41448&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=41448&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=41448&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=41448&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=41448&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=41448&r=needscript Try newer version: http://bugs.php.net/fix.php?id=41448&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=41448&r=support Expected behavior: http://bugs.php.net/fix.php?id=41448&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=41448&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=41448&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=41448&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=41448&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=41448&r=dst IIS Stability: http://bugs.php.net/fix.php?id=41448&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=41448&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=41448&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=41448&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=41448&r=mysqlcfg