#19649 [Opn->Ver]: Nested [] in browscap.ini cause PHP to crash

From: Date: Tue, 01 Oct 2002 23:00:18 +0000
Subject: #19649 [Opn->Ver]: Nested [] in browscap.ini cause PHP to crash
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-21175@lists.php.net to get a copy of this message 
 ID:               19649
 Updated by:       iliaa@php.net
 Reported By:      mark@quarella.co.uk
-Status:           Open
+Status:           Verified
 Bug Type:         Reproducible crash
 Operating System: Linux
-PHP Version:      4.2.2
+PHP Version:      4.3.0-dev
-Assigned To:      
+Assigned To:      zeev
 New Comment:

verified & updated version.

The problem occurs because 'arg2' passed to php_browscap_parser_cb() is
NULL and there are no checks for it, which causes Z_STRLEN_P(arg2) to
core.


Previous Comments:
------------------------------------------------------------------------

[2002-09-28 10:58:17] mark@quarella.co.uk

An entry in browscap.ini similar to the following:
  [Mozilla/4.76 (Macintosh;US;PPC) Opera 4.?  [en]]
.. will cause Apache/PHP to fail to start (segmentation fault) due to
the nested [] symbols.

The following complete browscap.ini would be enough to reproduce this:

   [Opera 4.0]
   
   [Mozilla/4.76 (Macintosh;US;PPC) Opera 4.?  [en]]
   parent=Opera 4.0
   platform=MacPPC

Interestingly, without a correctly formed entry on the first line PHP
reports a warning instead.

------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=19649&edit=1

Thread (5 messages)

« previous php.bugs (#21175) next »