Bug #70157 [Opn->Ver]: parse_ini_string() segmentation fault with INI_SCANNER_TYPED

Edit report at https://bugs.php.net/bug.php?id=70157&edit=1 ID: 70157 Updated by: cmb@php.net Reported by: publikusmail at postafiok dot hu Summary: parse_ini_string() segmentation fault with INI_SCANNER_TYPED -Status: Open +Status: Verified Type: Bug Package: Filesystem function related Operating System: * PHP Version: 7.0.0beta2 Block user comment: N Private report: N New Comment: Confirmed: Program received signal SIGSEGV, Segmentation fault. 0x00000000005e78e2 in zend_ini_add_string (result=0x7fffffff9cd0, op1=0x7fffffff9d20, op2=0x7fffffff9d30) at /home/cmb/php-src/Zend/zend_ini_parser.y:105 105 int op1_len = (int)Z_STRLEN_P(op1); (gdb) bt #0 0x00000000005e78e2 in zend_ini_add_string (result=0x7fffffff9cd0, op1=0x7fffffff9d20, op2=0x7fffffff9d30) at /home/cmb/php-src/Zend/zend_ini_parser.y:105 #1 0x00000000005e8a40 in ini_parse () at /home/cmb/php-src/Zend/zend_ini_parser.y:348 #2 0x00000000005e7e51 in zend_parse_ini_string ( str=0x7ffff687f070 "\n\n[agatha.christie]\ntitle = 10 little indians\n\n", u nbuffered_errors=0 '\000', scanner_mode=2, ini_parser_cb=0x526878 <php_ini_parser_cb_with_sections>, arg=0x7ffff68130b0) at /home/cmb/php-src/Zend/zend_ini_parser.y:238 #3 0x0000000000526bf8 in zif_parse_ini_string (execute_data=0x7ffff6813140, return_value=0x7ffff68130b0) at /home/cmb/php-src/ext/standard/basic_functions.c:5957 The problem is obvious. op1 in zend_ini_add_string is IS_LONG, but is treated as IS_STRING. The solution, however, is not so obvious to me. Previous Comments: ------------------------------------------------------------------------ [2015-07-28 12:31:25] publikusmail at postafiok dot hu Description: ------------ This bug affects both parse_ini_file() and parse_ini_string() functions. A string value starting with a number and without quotes causes segmentation fault, whenever mode is set to INI_SCANNER_TYPED. PHP versions tested: 5.6.9, 7.0.0b2 OS tested: Debian 8.1, Windows 8.1 Test script: --------------- <?php $ini = " [agatha.christie] title = 10 little indians "; var_dump(parse_ini_string($ini, true, INI_SCANNER_TYPED)); ?> Expected result: ---------------- array(1) { ["agatha.christie"]=> array(1) { ["title"]=> string(17) "10 little indians" } } Actual result: -------------- segmentation fault ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=70157&edit=1