Bug #68740 [NEW]: null pointer deference

From: bugreports at internot dot info Operating system: Linux Ubuntu 14.04 PHP version: master-Git-2015-01-04 (Git) Package: Regexps related Bug Type: Bug Bug description:null pointer deference Description: ------------ Hi, An explicit null deference happens in /ext/ereg/regex/regcomp.c: 140 g->setbits = NULL; then this is called: 167 categorize(p, g); which does this: 1326 if (cats[c] == 0 && isinsets(g, c)) { And then the isinsets function does this: 1279 for (i = 0, col = g->setbits; i < ncols; i++, col += g->csetsize) 1280 if (col[uc] != 0) 1281 return(1); which will cause a crash. Thanks, -- Edit bug report at https://bugs.php.net/bug.php?id=68740&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=68740&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=68740&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=68740&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=68740&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=68740&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=68740&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=68740&r=needscript Try newer version: https://bugs.php.net/fix.php?id=68740&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=68740&r=support Expected behavior: https://bugs.php.net/fix.php?id=68740&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=68740&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=68740&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=68740&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=68740&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=68740&r=dst IIS Stability: https://bugs.php.net/fix.php?id=68740&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=68740&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=68740&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=68740&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=68740&r=mysqlcfg