Bug #75236 [Opn->Ver]: infinite loop when printing an error-message
| From: | cmb@php.net | Date: | Wed, 20 Sep 2017 17:01:16 +0000 |
| Subject: | Bug #75236 [Opn->Ver]: infinite loop when printing an error-message | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-211275@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=75236&edit=1
ID: 75236
Updated by: cmb@php.net
Reported by: lzsiga at freemail dot c3 dot hu
Summary: infinite loop when printing an error-message
-Status: Open
+Status: Verified
Type: Bug
Package: Reproducible crash
Operating System: AIX, Linux
PHP Version: 7.1.9
Block user comment: N
Private report: N
New Comment:
I can confirm this issue. It happens for all unsupported "charsets", i.e.
for those that htmlentities() would throw a respective warning. See
<https://github.com/php/php-src/blob/php-7.1.9/ext/standard/html.c#L448-L467>.
> The problem could be solved if htmlentities didn't verify UTF8-validity and
> silently ignored 'charset' parameter.
That would cause other issues, though.
Previous Comments:
------------------------------------------------------------------------
[2017-09-20 16:27:38] lzsiga at freemail dot c3 dot hu
Description:
------------
Printing an error message with settings 'html_errors=true' and
'default_charset=ISO-8859-2' leads to infinite loop.
Components of the loop:
determine_charset -> php_error_docref0 -> php_verror -> php_escape_html_entities ->
php_escape_html_entities_ex -> determine_charset
This bug was introduced in version 7.1.9, main/main.c line 765
before: replace_buffer = php_escape_html_entities((unsigned char*)buffer, buffer_len, 0, ENT_COMPAT,
NULL);
after: php_escape_html_entities((unsigned char*)buffer, buffer_len, 0, ENT_COMPAT,
SG(default_charset));
(A note: The problem could be solved if htmlentities didn't verify UTF8-validity and silently
ignored 'charset' parameter. See also: https://bugs.php.net/bug.php?id=47494 )
Test script:
---------------
#!/usr/local/bin/php
<?php
ini_set('html_errors', true);
ini_set('default_charset', 'ISO-8859-2');
printf ("before getfilecontent\n");
file_get_contents ('no/suchfile');
printf ("after getfilecontent\n");
?>
Expected result:
----------------
before getfilecontent
PHP Warning: file_get_contents(no/suchfile): failed to open stream: No such file or directory in
/local/home/projects/devel/phptest/loopy.php on line 8
<br />
<b>Warning</b>: file_get_contents(no/suchfile): failed to open stream: No such file or
directory in <b>/local/home/projects/devel/phptest/loopy.php</b> on line
<b>8</b><br />
after getfilecontent
Actual result:
--------------
before getfilecontent
Segmentation fault
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=75236&edit=1