#42576 [Opn->Fbk]: stack smashing attack in function php_pcre_compile2
ID: 42576
Updated by: nlopess@php.net
Reported By: nivedg at gmail dot com
-Status: Open
+Status: Feedback
Bug Type: Apache2 related
Operating System: Linux 2.4.32
PHP Version: 4.4.7
New Comment:
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves.
A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external
resources such as databases, etc. If the script requires a
database to demonstrate the issue, please make sure it creates
all necessary tables, stored procedures etc.
Please avoid embedding huge scripts into the report.
without further info there's little we can do about this.
anyway I would say this is a typical pcre out-of-stack recursion.
#this reminds me I have to upgrade pcre in the php 4 branch..
Previous Comments:
------------------------------------------------------------------------
[2007-09-06 12:49:26] nivedg at gmail dot com
Description:
------------
I keep getting this error message in /var/log/httpd/error_log :
httpd: stack smashing attack in function php_pcre_compile2[Thu Sep 06
04:26:53 2007] [notice] child pid 20857 exit signal A
borted (6)
httpd: stack smashing attack in function php_pcre_compile2[Thu Sep 06
04:26:56 2007] [notice] child pid 20799 exit signal A
borted (6)
Apache version: 2.0.59
Php version: 4.4.7
Extensions used: gd and mysql
I'm using Mambo CMS on this server. Don't know what is causing this
error.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=42576&edit=1
Thread (2 messages)