Bug #64636 [Fbk->NoF]: Segfault in scan from parse_date.c

From: Date: Sun, 28 Jun 2015 04:22:19 +0000
Subject: Bug #64636 [Fbk->NoF]: Segfault in scan from parse_date.c
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-193947@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=64636&edit=1

 ID:               64636
 Updated by:       php-bugs@lists.php.net
 Reported by:      shakaran at gmail dot com
 Summary:          Segfault in scan from parse_date.c
-Status:           Feedback
+Status:           No Feedback
 Type:             Bug
 Package:          Apache2 related
 Operating System: Centos 5.9
 PHP Version:      5.3.24
 Assigned To:      cmb
 Private report:   N

 New Comment:

No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.


Previous Comments:
------------------------------------------------------------------------
[2015-06-14 22:54:26] cmb@php.net

Any news here? Has it turned out to have been a cPanel bug? Does
the issue still persist with current versions of PHP?

------------------------------------------------------------------------
[2013-04-12 14:18:51] shakaran at gmail dot com

I cannot provide a code example of this bug, because it is a production server 
with hundred of shared users and I don't know what exact php code and moment 
trigger the bug.

Also I am afraid that it is a cPanel PHP bug since that lines in parse_date.c 
don't follow the stacktrace.

Sorry for the noise here, I learn the leason with cPanel PHP, next time I will 
check first for a cPanel PHP bug and try to report in his support (but I am 
afraid that the bug will be ignored by months). Thanks

------------------------------------------------------------------------
[2013-04-12 13:15:20] johannes@php.net

Also please make sure this is not cpanel related (see also bug #64635)

------------------------------------------------------------------------
[2013-04-12 04:15:04] laruence@php.net

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.



------------------------------------------------------------------------
[2013-04-11 20:39:59] shakaran at gmail dot com

Another more different in this stacktrace:

(gdb) where
#0  0x00002b657d1ed073 in scan (s=0x17560ea0 "imap_header", len=<value optimized 
out>, errors=0x17560ea0, tzdb=0xd, 
    tz_get_wrapper=0x7fffcff08628) at /home/cpeasyapache/src/php-
5.3.23/ext/date/lib/parse_date.c:8374
#1  timelib_strtotime (s=0x17560ea0 "imap_header", len=<value optimized out>, 
errors=0x17560ea0, tzdb=0xd, tz_get_wrapper=0x7fffcff08628)
    at /home/cpeasyapache/src/php-5.3.23/ext/date/lib/parse_date.c:24730
#2  0x0000000000000000 in ?? ()
(gdb) thread apply all bt full

Thread 1 (Thread 0x2b657d0cdb40 (LWP 2470)):
#0  0x00002b657d1ed073 in scan (s=0x17560ea0 "imap_header", len=<value optimized 
out>, errors=0x17560ea0, tzdb=0xd, 
    tz_get_wrapper=0x7fffcff08628) at /home/cpeasyapache/src/php-
5.3.23/ext/date/lib/parse_date.c:8374
        yych = <value optimized out>
        yyaccept = 0
        cursor = <value optimized out>
        str = 0x17560ea0 "imap_header"
        ptr = 0x17556590 ""
        yybm = "\000\000\000\000\000\000\000\000\000d", '\000' <repeats 22 
times>, 
"d\000\000\000\000\000\000\000\000\000\000\200@\240`\000\002\002\002\002\002\002
\002\002\002\002\000\000\000\000\000\000\000", '\b' <repeats 26 times>, 
"\000\000\000\000\000\000\030\030\030X\030\030\030X\030\030\030\030\030X\030\030
\030XXX\030\030\030\030\030\030", '\000' <repeats 132 times>
#1  timelib_strtotime (s=0x17560ea0 "imap_header", len=<value optimized out>, 
errors=0x17560ea0, tzdb=0xd, tz_get_wrapper=0x7fffcff08628)
    at /home/cpeasyapache/src/php-5.3.23/ext/date/lib/parse_date.c:24730
        in = {fd = 0, lim = 0x0, str = 0x17560ea0 "imap_header", ptr = 
0x51615639 <Address 0x51615639 out of bounds>, 
          cur = 0xd <Address 0xd out of bounds>, tok = 0x2b657da43e1c 
"dns_get_record", pos = 0x2b657dde8320 "", line = 2099173936, len = 11109, 
          errors = 0x30ed950031, time = 0x7fffcff08510, tzdb = 0x0}
        e = <value optimized out>
#2  0x0000000000000000 in ?? ()
No symbol table info available.

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=64636


--
Edit this bug report at https://bugs.php.net/bug.php?id=64636&edit=1


Thread (7 messages)

« previous php.bugs (#193947) next »