Bug #66307 [Asn]: Fileinfo crashes with powerpoint files
Edit report at https://bugs.php.net/bug.php?id=66307&edit=1
ID: 66307
Updated by: ab@php.net
Reported by: jamal at tantaoui dot com
Summary: Fileinfo crashes with powerpoint files
Status: Assigned
Type: Bug
Package: Reproducible crash
Operating System: Windows 7 SP1 64bits
PHP Version: 5.5.7
Assigned To: ab
Block user comment: N
Private report: N
New Comment:
Yeah, of course a file to reproduce is required if the bug still persists. Just that 5.6 became the
latest libmagic, and the lower got many bugfixes in the last time. So i thought it's worth to
ask. Please mail some vulnerable ppt or just share somewhere, please specifically care there's
no sensitive information in there as a test case will be based on that.
Thanks.
Previous Comments:
------------------------------------------------------------------------
[2014-04-23 15:46:37] jamal at tantaoui dot com
Hi,
This bug still exists in the 5.5 branch of PHP (also in 5.5.11), but only in 64 bits. However, it
seems to be resolved in 5.6 beta1 (32 + 64 work).
For your second question, it may be reproduced in > 10% of the files i have tested (more than
4000 tested files).
If you are interested I can send you some of these files by email.
Sincerely,
------------------------------------------------------------------------
[2014-04-23 14:46:06] ab@php.net
@jamal, could you please check whether 5.6.0beta1 or the latest 5.5 release is vulnerable for you?
Is that some special ppt file or any?
Thanks.
------------------------------------------------------------------------
[2014-01-02 13:55:32] ab@php.net
Thanks for posting the memory dump, but I'd really like to see the backtrace first. I'd
also appreciate you to share the exact ppt file causing this crash.
Thanks
------------------------------------------------------------------------
[2013-12-17 20:21:31] jamal at tantaoui dot com
The backtrace is available here : https://mon-partage.fr/f/3lhKk35K/
------------------------------------------------------------------------
[2013-12-17 18:19:04] aharvey@php.net
Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php
for *NIX and
http://bugs.php.net/bugs-generating-backtrace-win32.php
for Win32
Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=66307
--
Edit this bug report at https://bugs.php.net/bug.php?id=66307&edit=1
Thread (8 messages)