Bug #66867 [Com]: 4 reproductible crash in PHP 5.6 (5.6.0alpha3)

From: Date: Sun, 09 Mar 2014 20:24:22 +0000
Subject: Bug #66867 [Com]: 4 reproductible crash in PHP 5.6 (5.6.0alpha3)
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-184667@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=66867&edit=1

 ID:                 66867
 Comment by:         contact at dimitrifourny dot com
 Reported by:        contact at dimitrifourny dot com
 Summary:            4 reproductible crash in PHP 5.6 (5.6.0alpha3)
 Status:             Open
 Type:               Bug
 Package:            Reproducible crash
 Operating System:   Windows7 x64
 PHP Version:        master-Git-2014-03-09 (Git)
 Block user comment: N
 Private report:     N

 New Comment:

Done:

https://bugs.php.net/bug.php?id=66870
https://bugs.php.net/bug.php?id=66871
https://bugs.php.net/bug.php?id=66872
https://bugs.php.net/bug.php?id=66873


Previous Comments:
------------------------------------------------------------------------
[2014-03-09 20:13:30] contact at dimitrifourny dot com

I will do it, no problem.

------------------------------------------------------------------------
[2014-03-09 19:06:45] pajoye@php.net

hi,

Thanks for the report!

already fixing the 1st (have to commit) but it would be better to have three different reports.
Could you do it pls? I can open them as well if you prefer.

------------------------------------------------------------------------
[2014-03-09 17:29:06] contact at dimitrifourny dot com

Description:
------------
Hello!

I have found 4 possible security issues.
Can you fix it to make a more stable PHP version please?

Thank you for your good job!

Test script:
---------------
<?php
    imageaffinematrixget(1, str_repeat('A', 2000));
?>

<?php
    $o = (object) str_repeat(urldecode("%u0c0c%u0c0c"), 2000);
    imageaffinematrixget(2, $o);
?>

<?php
    gmp_testbit(str_repeat("A", 2000), 1);
?>

<?php
    $o = new UConverter(1, 1);
    $o->toUCallback(1, 1, 1, $b);
?>

Actual result:
--------------
A nice crash on Windows 7 x64.


------------------------------------------------------------------------



-- 
Edit this bug report at https://bugs.php.net/bug.php?id=66867&edit=1


Thread (5 messages)

« previous php.bugs (#184667) next »