Bug #66867 [Opn->Csd]: 4 reproductible crash in PHP 5.6 (5.6.0alpha3)

From: Date: Thu, 03 Apr 2014 07:19:37 +0000
Subject: Bug #66867 [Opn->Csd]: 4 reproductible crash in PHP 5.6 (5.6.0alpha3)
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-185055@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=66867&edit=1

 ID:                 66867
 Updated by:         ab@php.net
 Reported by:        contact at dimitrifourny dot com
 Summary:            4 reproductible crash in PHP 5.6 (5.6.0alpha3)
-Status:             Open
+Status:             Closed
 Type:               Bug
 Package:            Reproducible crash
 Operating System:   Windows7 x64
 PHP Version:        master-Git-2014-03-09 (Git)
-Assigned To:        
+Assigned To:        ab
 Block user comment: N
 Private report:     N

 New Comment:

All the linked tickets are closed, so be this one.


Previous Comments:
------------------------------------------------------------------------
[2014-03-09 20:24:22] contact at dimitrifourny dot com

Done:

https://bugs.php.net/bug.php?id=66870
https://bugs.php.net/bug.php?id=66871
https://bugs.php.net/bug.php?id=66872
https://bugs.php.net/bug.php?id=66873

------------------------------------------------------------------------
[2014-03-09 20:13:30] contact at dimitrifourny dot com

I will do it, no problem.

------------------------------------------------------------------------
[2014-03-09 19:06:45] pajoye@php.net

hi,

Thanks for the report!

already fixing the 1st (have to commit) but it would be better to have three different reports.
Could you do it pls? I can open them as well if you prefer.

------------------------------------------------------------------------
[2014-03-09 17:29:06] contact at dimitrifourny dot com

Description:
------------
Hello!

I have found 4 possible security issues.
Can you fix it to make a more stable PHP version please?

Thank you for your good job!

Test script:
---------------
<?php
    imageaffinematrixget(1, str_repeat('A', 2000));
?>

<?php
    $o = (object) str_repeat(urldecode("%u0c0c%u0c0c"), 2000);
    imageaffinematrixget(2, $o);
?>

<?php
    gmp_testbit(str_repeat("A", 2000), 1);
?>

<?php
    $o = new UConverter(1, 1);
    $o->toUCallback(1, 1, 1, $b);
?>

Actual result:
--------------
A nice crash on Windows 7 x64.


------------------------------------------------------------------------



-- 
Edit this bug report at https://bugs.php.net/bug.php?id=66867&edit=1

Thread (5 messages)

« previous php.bugs (#185055) next »