#43861 [Opn]: suhosin patch detects heap overflow on mssql_free_result()

From: Date: Wed, 30 Jan 2008 01:09:03 +0000
Subject: #43861 [Opn]: suhosin patch detects heap overflow on mssql_free_result()
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-121767@lists.php.net to get a copy of this message
ID: 43861 Updated by: rasmus@php.net Reported By: skennedy at vcn dot com Status: Open Bug Type: MSSQL related Operating System: FreeBSD 6.2 PHP Version: 5.2.5 New Comment: I know that Valgrind output looks scary, but that is actually a clean run. The dlopen/dlclose stuff is normal. Are you seeing the same warning on this setup? Previous Comments: ------------------------------------------------------------------------ [2008-01-30 00:09:25] skennedy at vcn dot com http://www.bandwidthbuilders.com/valgrind-output.txt ------------------------------------------------------------------------ [2008-01-28 23:35:12] tony2001@php.net Would be nice if you try it on some Linux machine. ------------------------------------------------------------------------ [2008-01-28 21:51:54] skennedy at vcn dot com Apparently amd64/FreeBSD cannot run valgrind. I get this when trying to install it: ===> valgrind-352_7 is only for i386, while you are running amd64.*** Error code 1 Is there anything else that's amd64/FreeBSD friendly I can use? ------------------------------------------------------------------------ [2008-01-27 16:46:42] iliaa@php.net Can you please to run the script through valgrind without suhosin extension enabled. ------------------------------------------------------------------------ [2008-01-22 15:54:29] kepi at orthank dot net We have same problem with every sql query we tried: <?php $conn = odbc_connect("FreeTDS", "user", "name"); $query = "SELECT * FROM systypes"; $result = odbc_exec($conn,$query); ?> result: -------- ALERT - canary mismatch on efree() - heap overflow detected (attacker '127.0.0.1', file '/var/www/test.php', line 3) ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/43861 -- Edit this bug report at http://bugs.php.net/?id=43861&edit=1

« previous php.bugs (#121767) next »