#46551 [Com]: preg_replace crash the httpd process
| From: | donquixote dot phplist at googlemail dot com | Date: | Mon, 28 Sep 2009 05:29:36 +0000 |
| Subject: | #46551 [Com]: preg_replace crash the httpd process | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-142979@lists.php.net to get a copy of this message | ||
ID: 46551
Comment by: donquixote dot phplist at googlemail dot com
Reported By: johnpupu at gmail dot com
Status: No Feedback
Bug Type: PCRE related
Operating System: FreeBSD 7.0-RELEASE-p4
PHP Version: 5.2.6
New Comment:
Sorry for the multipost. When I tried this with Opera I always got this
error message:
"Authentication failed: Incorrect username Authentication failed:
Incorrect username
Warning: Cannot modify header information - headers already sent by
(output started at /home/Web/sites/php-bugs-web/include/auth.inc:30) in
/home/Web/sites/php-bugs-web/report.php on line 201"
Previous Comments:
------------------------------------------------------------------------
[2009-09-28 05:27:33] donquixote dot phplist at googlemail dot com
I found a regex / text combination that causes my apache to crash /
restart with preg_replace. The example is a reduced version of Drupal's
CSS compression regex.
The regex is not overly complex, and the text is not overly long.
Reproducing this depends on system configuration: On my webspace it
does not crash.
But, on my localhost it makes a reproducible crash. Removing a few
letters in the regexped text (no matter which) makes the bug not
happen.
More info in the linked file.
standalone "evil script" at
http://drupal.org/files/issues/test.php__1.txt
(rename to *.php)
posted here
http://drupal.org/node/444228#comment-2089300
------------------------------------------------------------------------
[2009-09-28 05:24:19] donquixote dot phplist at googlemail dot com
I found a regex / text combination that causes my apache to crash /
restart with preg_replace. The example is a reduced version of Drupal's
CSS compression regex.
The regex is not overly complex, and the text is not overly long.
Reproducing this depends on system configuration: On my webspace it
does not crash.
But, on my localhost it makes a reproducible crash. Removing a few
letters in the regexped text (no matter which) makes the bug not
happen.
More info in the linked file.
standalone "evil script" at
http://drupal.org/files/issues/test.php__1.txt
(rename to *.php)
posted here
http://drupal.org/node/444228#comment-2089300
------------------------------------------------------------------------
[2009-09-28 05:22:55] donquixote dot phplist at googlemail dot com
I found a regex / text combination that causes my apache to crash /
restart with preg_replace. The example is a reduced version of Drupal's
CSS compression regex.
The regex is not overly complex, and the text is not overly long.
Reproducing this depends on system configuration: On my webspace it
does not crash.
But, on my localhost it makes a reproducible crash. Removing a few
letters in the regexped text (no matter which) makes the bug not
happen.
More info in the linked file.
standalone "evil script" at
http://drupal.org/files/issues/test.php__1.txt
(rename to *.php)
posted here
http://drupal.org/node/444228#comment-2089300
------------------------------------------------------------------------
[2009-09-28 05:22:03] donquixote dot phplist at googlemail dot com
I found a regex / text combination that causes my apache to crash /
restart with preg_replace. The example is a reduced version of Drupal's
CSS compression regex.
The regex is not overly complex, and the text is not overly long.
Reproducing this depends on system configuration: On my webspace it
does not crash.
But, on my localhost it makes a reproducible crash. Removing a few
letters in the regexped text (no matter which) makes the bug not
happen.
More info in the linked file.
standalone "evil script" at
http://drupal.org/files/issues/test.php__1.txt
(rename to *.php)
posted here
http://drupal.org/node/444228#comment-2089300
------------------------------------------------------------------------
[2008-11-20 01:00:01] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/46551
--
Edit this bug report at http://bugs.php.net/?id=46551&edit=1