Bug #62716 [NEW]: munmap() is called with the incorrect length

From: slangley at google dot com Operating system: All PHP version: 5.3.15 Package: Scripting Engine problem Bug Type: Bug Bug description:munmap() is called with the incorrect length Description: ------------ In zend_stream.cc the size passed to mmap is the size of the file + ZEND_MMAP_AHEAD. *buf = mmap(0, size + ZEND_MMAP_AHEAD, PROT_READ, MAP_PRIVATE, fileno(file_handle->handle.fp), 0); However, when munmap() is called the incorrect size is passed. static void zend_stream_unmap(zend_stream *stream TSRMLS_DC) { /* {{{ */ #if HAVE_MMAP if (stream->mmap.map) { munmap(stream->mmap.map, stream->mmap.len); } else #endif The call to munmap should be munmap(stream->mmap.map, stream->mmap.len + ZEND_MMAP_AHEAD); Test script: --------------- N/A Expected result: ---------------- N/A Actual result: -------------- N/A -- Edit bug report at https://bugs.php.net/bug.php?id=62716&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=62716&r=trysnapshot54 Try a snapshot (PHP 5.3): https://bugs.php.net/fix.php?id=62716&r=trysnapshot53 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=62716&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=62716&r=fixed Fixed in SVN and need be documented: https://bugs.php.net/fix.php?id=62716&r=needdocs Fixed in release: https://bugs.php.net/fix.php?id=62716&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=62716&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=62716&r=needscript Try newer version: https://bugs.php.net/fix.php?id=62716&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=62716&r=support Expected behavior: https://bugs.php.net/fix.php?id=62716&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=62716&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=62716&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=62716&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=62716&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=62716&r=dst IIS Stability: https://bugs.php.net/fix.php?id=62716&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=62716&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=62716&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=62716&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=62716&r=mysqlcfg