Bug #73589 [Com]: segfault in pdo_dblib_error_handler
| From: | adambaratz@php.net | Date: | Wed, 23 Nov 2016 14:03:24 +0000 |
| Subject: | Bug #73589 [Com]: segfault in pdo_dblib_error_handler | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-205575@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=73589&edit=1
ID: 73589
Comment by: adambaratz@php.net
Reported by: adambaratz@php.net
Summary: segfault in pdo_dblib_error_handler
Status: Open
Type: Bug
Package: PDO DBlib
PHP Version: 7.0.13
Block user comment: N
Private report: N
New Comment:
Example backtrace:
#0 0x00007f871d9ee3c0 in strcpy (__src=<optimized out>, __dest=0x6874206d6f726620 <Address
0x6874206d6f726620 out of bounds>) at string3.h:104
#1 pdo_dblib_error_handler (dbproc=<optimized out>, severity=16, dberr=20018, oserr=-1,
dberrstr=0x7f871e9f3560 "General SQL Server error: Check messages from the SQL Server",
oserrstr=0x0) at pdo_dblib.c:129
#2 0x00007f871e9bccc4 in _dblib_handle_info_message () from libsybdb.so.5
#3 0x00007f871e9ca9fb in tds_process_msg () from libsybdb.so.5
#4 0x00007f871e9ca152 in tds_process_default_tokens () from libsybdb.so.5
#5 0x00007f871e9cb729 in tds_process_tokens () from libsybdb.so.5
#6 0x00007f871e9b60d0 in dbsqlok () from libsybdb.so.5
#7 0x00007f871d9eea89 in pdo_dblib_transaction_cmd (cmd=<optimized out>, dbh=<optimized
out>)
at dblib_driver.c:203
Previous Comments:
------------------------------------------------------------------------
[2016-11-23 13:52:50] adambaratz@php.net
Description:
------------
If einfo is provided by dbgetuserdata, a segfault occurs at the strcpy at the end of the function.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=73589&edit=1