Bug #66307 [Asn->Csd]: Fileinfo crashes with powerpoint files

From: Date: Thu, 24 Apr 2014 17:37:42 +0000
Subject: Bug #66307 [Asn->Csd]: Fileinfo crashes with powerpoint files
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-185417@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=66307&edit=1

 ID:                 66307
 Updated by:         ab@php.net
 Reported by:        jamal at tantaoui dot com
 Summary:            Fileinfo crashes with powerpoint files
-Status:             Assigned
+Status:             Closed
 Type:               Bug
 Package:            Reproducible crash
 Operating System:   Windows 7 SP1 64bits
 PHP Version:        5.5.7
 Assigned To:        ab
 Block user comment: N
 Private report:     N

 New Comment:

Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=03fa5501a84af2bda7d81c732d46d2a68ee0e855
Log: Fixed bug #66307 Fileinfo crashes with powerpoint files


Previous Comments:
------------------------------------------------------------------------
[2014-04-23 16:54:32] ab@php.net

Yeah, of course a file to reproduce is required if the bug still persists. Just that 5.6 became the
latest libmagic, and the lower got many bugfixes in the last time. So i thought it's worth to
ask. Please mail some vulnerable ppt or just share somewhere, please specifically care there's
no sensitive information in there as a test case will be based on that.

Thanks.

------------------------------------------------------------------------
[2014-04-23 15:46:37] jamal at tantaoui dot com

Hi,

This bug still exists in the 5.5 branch of PHP (also in 5.5.11), but only in 64 bits. However, it
seems to be resolved in 5.6 beta1 (32 + 64 work).

For your second question, it may be reproduced in > 10% of the files i have tested (more than
4000 tested files).

If you are interested I can send you some of these files by email.

Sincerely,

------------------------------------------------------------------------
[2014-04-23 14:46:06] ab@php.net

@jamal, could you please check whether 5.6.0beta1 or the latest 5.5 release is vulnerable for you?
Is that some special ppt file or any?

Thanks.

------------------------------------------------------------------------
[2014-01-02 13:55:32] ab@php.net

Thanks for posting the memory dump, but I'd really like to see the backtrace first. I'd
also appreciate you to share the exact ppt file causing this crash.

Thanks

------------------------------------------------------------------------
[2013-12-17 20:21:31] jamal at tantaoui dot com

The backtrace is available here : https://mon-partage.fr/f/3lhKk35K/

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=66307


-- 
Edit this bug report at https://bugs.php.net/bug.php?id=66307&edit=1


Thread (8 messages)

« previous php.bugs (#185417) next »