#46551 [Com]: preg_replace crash the httpd process

From: Date: Mon, 28 Sep 2009 05:27:34 +0000
Subject: #46551 [Com]: preg_replace crash the httpd process
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-142978@lists.php.net to get a copy of this message 
 ID:               46551
 Comment by:       donquixote dot phplist at googlemail dot com
 Reported By:      johnpupu at gmail dot com
 Status:           No Feedback
 Bug Type:         PCRE related
 Operating System: FreeBSD 7.0-RELEASE-p4
 PHP Version:      5.2.6
 New Comment:

I found a regex / text combination that causes my apache to crash /
restart with preg_replace. The example is a reduced version of Drupal's
CSS compression regex.

The regex is not overly complex, and the text is not overly long.

Reproducing this depends on system configuration: On my webspace it
does not crash.
But, on my localhost it makes a reproducible crash. Removing a few
letters in the regexped text (no matter which) makes the bug not
happen.

More info in the linked file.

standalone "evil script" at
http://drupal.org/files/issues/test.php__1.txt
(rename to *.php)

posted here
http://drupal.org/node/444228#comment-2089300


Previous Comments:
------------------------------------------------------------------------

[2009-09-28 05:24:19] donquixote dot phplist at googlemail dot com

I found a regex / text combination that causes my apache to crash /
restart with preg_replace. The example is a reduced version of Drupal's
CSS compression regex.

The regex is not overly complex, and the text is not overly long.

Reproducing this depends on system configuration: On my webspace it
does not crash.
But, on my localhost it makes a reproducible crash. Removing a few
letters in the regexped text (no matter which) makes the bug not
happen.

More info in the linked file.

standalone "evil script" at
http://drupal.org/files/issues/test.php__1.txt
(rename to *.php)

posted here
http://drupal.org/node/444228#comment-2089300

------------------------------------------------------------------------

[2009-09-28 05:22:55] donquixote dot phplist at googlemail dot com

I found a regex / text combination that causes my apache to crash /
restart with preg_replace. The example is a reduced version of Drupal's
CSS compression regex.

The regex is not overly complex, and the text is not overly long.

Reproducing this depends on system configuration: On my webspace it
does not crash.
But, on my localhost it makes a reproducible crash. Removing a few
letters in the regexped text (no matter which) makes the bug not
happen.

More info in the linked file.

standalone "evil script" at
http://drupal.org/files/issues/test.php__1.txt
(rename to *.php)

posted here
http://drupal.org/node/444228#comment-2089300

------------------------------------------------------------------------

[2009-09-28 05:22:03] donquixote dot phplist at googlemail dot com

I found a regex / text combination that causes my apache to crash /
restart with preg_replace. The example is a reduced version of Drupal's
CSS compression regex.

The regex is not overly complex, and the text is not overly long.

Reproducing this depends on system configuration: On my webspace it
does not crash.
But, on my localhost it makes a reproducible crash. Removing a few
letters in the regexped text (no matter which) makes the bug not
happen.

More info in the linked file.

standalone "evil script" at
http://drupal.org/files/issues/test.php__1.txt
(rename to *.php)

posted here
http://drupal.org/node/444228#comment-2089300

------------------------------------------------------------------------

[2008-11-20 01:00:01] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

------------------------------------------------------------------------

[2008-11-12 13:09:09] jani@php.net

Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/

And also, you need to provide the full configure line you used to
compile PHP. If you're using anything but bundled PCRE lib -> bogus.

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/46551

-- 
Edit this bug report at http://bugs.php.net/?id=46551&edit=1

Thread (7 messages)

« previous php.bugs (#142978) next »