Bug #75282 [Opn->Ver]: xmlrpc_encode_request() crashes with "zend_mm_heap corrupted"

From: Date: Sun, 07 Oct 2018 16:19:01 +0000
Subject: Bug #75282 [Opn->Ver]: xmlrpc_encode_request() crashes with "zend_mm_heap corrupted"
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-217459@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=75282&edit=1

 ID:                 75282
 Updated by:         cmb@php.net
 Reported by:        marina at moodle dot com
 Summary:            xmlrpc_encode_request() crashes with "zend_mm_heap
                     corrupted"
-Status:             Open
+Status:             Verified
 Type:               Bug
 Package:            XMLRPC-EPI related
 Operating System:   Ubuntu
 PHP Version:        7.2.0RC3
 Block user comment: N
 Private report:     N

 New Comment:

<https://github.com/php/php-src/pull/3591> is
supposed to resolve
this bug.


Previous Comments:
------------------------------------------------------------------------
[2017-10-25 06:53:05] remi@php.net

Obviously a HAVE_LIBXMLRPC is missing (config.m4), and should be used to select to proper free /
efree method for data allocated by the lib.

------------------------------------------------------------------------
[2017-10-25 00:54:24] marina at moodle dot com

Thanks Ondrej, everything works for me now as I commented also on https://github.com/oerdnj/deb.sury.org/issues/724

Nikic, we are gradually moving away from xmlrpc in Moodle but there is still some functionality that
depends on it, unfortunately.

------------------------------------------------------------------------
[2017-10-24 18:53:50] ondrej@php.net

Maybe don't revert is as whole, but just wrap the free vs efree in ext/xmlrpc/xmlrpc-epi-php.c
into #if XMLRPC_MODULE_TYPE == builtin/external ?

------------------------------------------------------------------------
[2017-10-24 18:48:55] ondrej@php.net

Thanks, that's considerate.  I know it isn't easy with the distro packagers :).

------------------------------------------------------------------------
[2017-10-24 18:18:59] nikic@php.net

Right, https://github.com/php/php-src/commit/3a0872d08fc71d9bb9ec3d431260f838725d3b8d
needs to be reverted. I had assumed libxmlrpc is abandonware, but seemingly it isn't.

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=75282


--
Edit this bug report at https://bugs.php.net/bug.php?id=75282&edit=1


Thread (16 messages)

« previous php.bugs (#217459) next »