#43301 [Fbk->Opn]: mbstring crash cgi

ID: 43301 User updated by: yoy dot noneoff at dfgh dot net Reported By: yoy dot noneoff at dfgh dot net -Status: Feedback +Status: Open Bug Type: mbstring related Operating System: win xp sp2 PHP Version: 5.3CVS-2007-11-15 (CVS) New Comment: Function Arg 1 Arg 2 Arg 3 Source php_mbstring!_php_mb_regex_ereg_replace_exec+5e5 00000004 0112c838 00000000 php_mbstring!zif_mb_ereg_replace+25 00000004 0112c838 00000000 php5ts!zend_do_fcall_common_helper_SPEC+85b 00c0fbf0 00033f50 0112c28b php5ts!ZEND_DO_FCALL_SPEC_CONST_HANDLER+12f 00000000 00033f50 00033f50 php5ts!execute+1b7 0112c298 00033f50 00000000 php5ts!zend_execute_scripts+107 00000008 00033f50 00000000 php5ts!php_execute_script+20d 00c0fec8 00033f50 ed13662e php!main+c0e 00000002 00032cc0 00032f38 php!mainCRTStartup+e3 ed13662e 01c827f6 7ffd4000 kernel32!RegisterWaitForInputIdle+49 00402c12 00000000 00000000 Previous Comments: ------------------------------------------------------------------------ [2007-11-15 22:50:34] jani@php.net Thank you for this bug report. To properly diagnose the problem, we need a backtrace to see what is happening behind the scenes. To find out how to generate a backtrace, please read http://bugs.php.net/bugs-generating-backtrace.php for *NIX and http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32 Once you have generated a backtrace, please submit it to this bug report and change the status back to "Open". Thank you for helping us make PHP better. ------------------------------------------------------------------------ [2007-11-15 20:03:45] yoy dot noneoff at dfgh dot net correct Reproduce code: --------------- <?php $ptr = 'hello'; $txt = <<<doc hello, I have got a cr*sh on you doc; echo mb_ereg_replace($ptr,'$1',$txt,'e'); ?> ------------------------------------------------------------------------ [2007-11-15 01:35:30] yoy dot noneoff at dfgh dot net Description: ------------ php crash on mbstring(php_mbstring.dll) when runnign as CGI. 'e' flag/option and $replacement parameter contian php-expression with syntax error. problem not present when php loaded as module(Apache) Parse error is thrown. applay on the latest php 5.3 and also on php 5.2 Reproduce code: --------------- <?php $ptr = 'hello'; $txt = <<<doc hello, I have got a cr*sh on you doc; echo C($ptr,'$1',$txt,'e'); ?> Expected result: ---------------- see Parse Error, similer to php loaded as module. Actual result: -------------- crash error AppName: php-cgi.exe AppVer: 5.3.0.0 ModName: php_mbstring.dll ModVer: 5.3.0.0 Offset: 00031595 ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=43301&edit=1