Sec Bug->Bug #73349 [Csd]: crash in simplestring_addn function

Edit report at https://bugs.php.net/bug.php?id=73349&edit=1 ID: 73349 Updated by: stas@php.net Reported by: nguyenluan dot vnn at gmail dot com Summary: crash in simplestring_addn function Status: Closed -Type: Security +Type: Bug Package: XMLRPC-EPI related PHP Version: 7.0.12 Assigned To: stas Block user comment: N Private report: N Previous Comments: ------------------------------------------------------------------------ [2016-11-14 11:42:38] nguyenluan dot vnn at gmail dot com Fixed in PHP 7.1.0 RC6. Please close. Thanks. ------------------------------------------------------------------------ [2016-11-11 13:04:35] nguyenluan dot vnn at gmail dot com Open again. ------------------------------------------------------------------------ [2016-11-11 13:04:22] nguyenluan dot vnn at gmail dot com It still crashes in version 7.0.13. Please check again. ------------------------------------------------------------------------ [2016-11-05 21:49:20] stas@php.net The fix for this bug has been committed. Snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. For Windows: http://windows.php.net/snapshots/ Thank you for the report, and for helping us make PHP better. ------------------------------------------------------------------------ [2016-10-20 04:31:04] stas@php.net We can patch it, but should be reported upstream anyway. Preferred way would be to patch upstream and update/backport here, but if not possible, we can do our own fix. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=73349 -- Edit this bug report at https://bugs.php.net/bug.php?id=73349&edit=1