Bug #77193 [Asn]: Infinite loop in preg_replace_callback

Edit report at https://bugs.php.net/bug.php?id=77193&edit=1 ID: 77193 Updated by: requinix@php.net Reported by: mlocati at gmail dot com Summary: Infinite loop in preg_replace_callback Status: Assigned Type: Bug Package: PCRE related PHP Version: 7.3.0RC6 Assigned To: ab Block user comment: N Private report: N New Comment: What happens with this? <?php $text = '{CCM:CID_2}'; echo '1'; preg_replace_callback( '/([0-9]+)/i', function ($matches) { echo $matches[1]; preg_match('/^http$/i', ''); }, $text ); echo '3'; Previous Comments: ------------------------------------------------------------------------ [2018-11-30 16:46:36] mlocati at gmail dot com PS: I'm on Windows, so -1073741819 is the 0xC0000005 (STATUS_ACCESS_VIOLATION) system error ------------------------------------------------------------------------ [2018-11-30 16:41:16] mlocati at gmail dot com It took me quite some time to keep removing stuff to get to a test script as simple as possible, and here it is: <?php $text = '{CCM:CID_2}'; echo '1'; preg_replace_callback( '/([0-9]+)/i', function ($matches) { echo $matches[1]; filter_var('http', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => '/^http$/i']]); }, $text ); echo '3'; It should print '123', but it prints '1' and an infinite number of '2'. If you set $text to just a digit (eg '2'), just '12' is printed out, and PHP quits with an error level -1073741819 (I'm using a 32-bit PHP). ------------------------------------------------------------------------ [2018-11-30 15:07:00] ab@php.net Thanks for testing, Michele. Chistoph, I'll be preparing a patch then. Still lack on a simpler repro case :/ Thanks ------------------------------------------------------------------------ [2018-11-29 22:54:34] cmb@php.net Thanks for testing, Michele! Then we should go with Anatol's patch. Not sure if it should go into PHP-7.3.0. ------------------------------------------------------------------------ [2018-11-29 13:39:06] mlocati at gmail dot com Just for the records, I'm compiling a 32-bit PHP under Windows with configure --disable-all --with-all-shared --enable-cli --enable-phar --enable-json --enable-filter --with-iconv --enable-pdo --with-mysqli --with-mysqlnd --with-pdo-mysql --with-openssl --with-simplexml --with-libxml --with-gd --enable-mbstring --enable-tokenizer --with-dom --with-xml --enable-xmlreader --enable-xmlwriter --enable-hash --enable-fileinfo --enable-session --enable-zip nmake ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=77193 -- Edit this bug report at https://bugs.php.net/bug.php?id=77193&edit=1