#43861 [Opn]: suhosin patch detects heap overflow on mssql_free_result()
| From: | rasmus@php.net | Date: | Wed, 30 Jan 2008 01:09:03 +0000 |
| Subject: | #43861 [Opn]: suhosin patch detects heap overflow on mssql_free_result() | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-121767@lists.php.net to get a copy of this message | ||
ID: 43861
Updated by: rasmus@php.net
Reported By: skennedy at vcn dot com
Status: Open
Bug Type: MSSQL related
Operating System: FreeBSD 6.2
PHP Version: 5.2.5
New Comment:
I know that Valgrind output looks scary, but that is actually a clean
run. The dlopen/dlclose stuff is normal. Are you seeing the same
warning on this setup?
Previous Comments:
------------------------------------------------------------------------
[2008-01-30 00:09:25] skennedy at vcn dot com
http://www.bandwidthbuilders.com/valgrind-output.txt
------------------------------------------------------------------------
[2008-01-28 23:35:12] tony2001@php.net
Would be nice if you try it on some Linux machine.
------------------------------------------------------------------------
[2008-01-28 21:51:54] skennedy at vcn dot com
Apparently amd64/FreeBSD cannot run valgrind. I get this when trying
to install it:
===> valgrind-352_7 is only for i386, while you are running amd64.***
Error code 1
Is there anything else that's amd64/FreeBSD friendly I can use?
------------------------------------------------------------------------
[2008-01-27 16:46:42] iliaa@php.net
Can you please to run the script through valgrind without suhosin
extension enabled.
------------------------------------------------------------------------
[2008-01-22 15:54:29] kepi at orthank dot net
We have same problem with every sql query we tried:
<?php
$conn = odbc_connect("FreeTDS", "user", "name");
$query = "SELECT * FROM systypes";
$result = odbc_exec($conn,$query);
?>
result:
--------
ALERT - canary mismatch on efree() - heap overflow detected (attacker
'127.0.0.1', file '/var/www/test.php', line 3)
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/43861
--
Edit this bug report at http://bugs.php.net/?id=43861&edit=1