Sec Bug->Bug #73284 [Csd]: heap overflow in php_ereg_replace function

Edit report at https://bugs.php.net/bug.php?id=73284&edit=1 ID: 73284 Updated by: stas@php.net Reported by: nguyenluan dot vnn at gmail dot com Summary: heap overflow in php_ereg_replace function Status: Closed -Type: Security +Type: Bug Package: Regexps related PHP Version: 5.6.26 Assigned To: stas Block user comment: N Private report: N Previous Comments: ------------------------------------------------------------------------ [2016-10-17 10:07:15] bwoebi@php.net Automatic comment on behalf of stas Revision: http://git.php.net/?p=php-src.git;a=commit;h=21452a5401e9c7e34227b9241495f5839cfc3234 Log: Fix bug #73284 - heap overflow in php_ereg_replace function ------------------------------------------------------------------------ [2016-10-14 02:23:02] ab@php.net Automatic comment on behalf of stas Revision: http://git.php.net/?p=php-src.git;a=commit;h=21452a5401e9c7e34227b9241495f5839cfc3234 Log: Fix bug #73284 - heap overflow in php_ereg_replace function ------------------------------------------------------------------------ [2016-10-12 23:35:33] ab@php.net Automatic comment on behalf of stas Revision: http://git.php.net/?p=php-src.git;a=commit;h=21452a5401e9c7e34227b9241495f5839cfc3234 Log: Fix bug #73284 - heap overflow in php_ereg_replace function ------------------------------------------------------------------------ [2016-10-11 23:45:37] stas@php.net Automatic comment on behalf of stas Revision: http://git.php.net/?p=php-src.git;a=commit;h=21452a5401e9c7e34227b9241495f5839cfc3234 Log: Fix bug #73284 - heap overflow in php_ereg_replace function ------------------------------------------------------------------------ [2016-10-11 21:18:13] stas@php.net The fix is in security repo as 21452a5401e9c7e34227b9241495f5839cfc3234 and in https://gist.github.com/282a748d68c226dbb86ab616d11cfc20 please verify ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=73284 -- Edit this bug report at https://bugs.php.net/bug.php?id=73284&edit=1