Bug #79968 [NEW]: DOMText::before() crashes

From: Date: Thu, 13 Aug 2020 11:06:15 +0000
Subject: Bug #79968 [NEW]: DOMText::before() crashes
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-228566@lists.php.net to get a copy of this message
From:             nikic
Operating system: 
PHP version:      8.0.0beta1
Package:          DOM XML related
Bug Type:         Bug
Bug description:DOMText::before() crashes

Description:
------------
<?php
$cdata = new DOMText;
$cdata->before(null);

==441255== Invalid read of size 4
==441255==    at 0x488E30: dom_zvals_to_fragment (parentnode.c:137)
==441255==    by 0x489514: dom_parent_node_before (parentnode.c:339)
==441255==    by 0x494744: zim_DOMCharacterData_before
(characterdata.c:428)
==441255==    by 0x9FA8B4: ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER
(zend_vm_execute.h:1618)
==441255==    by 0xA678B8: execute_ex (zend_vm_execute.h:53562)
==441255==    by 0xA6CA21: zend_execute (zend_vm_execute.h:57766)
==441255==    by 0x9C134B: zend_execute_scripts (zend.c:1696)
==441255==    by 0x923E4E: php_execute_script (main.c:2535)
==441255==    by 0xAABE2F: do_cli (php_cli.c:949)
==441255==    by 0xAACE6E: main (php_cli.c:1336)
==441255==  Address 0x8 is not stack'd, malloc'd or (recently) free'd



-- 
Edit bug report at https://bugs.php.net/bug.php?id=79968&edit=1
-- 
Fix committed:                    https://bugs.php.net/fix.php?id=79968&r=fixed
Fixed in release:                 https://bugs.php.net/fix.php?id=79968&r=alreadyfixed
Need backtrace:                   https://bugs.php.net/fix.php?id=79968&r=needtrace
Need Reproduce Script:            https://bugs.php.net/fix.php?id=79968&r=needscript
Try newer version:                https://bugs.php.net/fix.php?id=79968&r=oldversion
Not developer issue:              https://bugs.php.net/fix.php?id=79968&r=support
Expected behavior:                https://bugs.php.net/fix.php?id=79968&r=notwrong
Not enough info:                  https://bugs.php.net/fix.php?id=79968&r=notenoughinfo
Submitted twice:                  https://bugs.php.net/fix.php?id=79968&r=submittedtwice
register_globals:                 https://bugs.php.net/fix.php?id=79968&r=globals
PHP version support discontinued: https://bugs.php.net/fix.php?id=79968&r=phptooold
Daylight Savings:                 https://bugs.php.net/fix.php?id=79968&r=dst
IIS Stability:                    https://bugs.php.net/fix.php?id=79968&r=isapi
Install GNU Sed:                  https://bugs.php.net/fix.php?id=79968&r=gnused
Floating point limitations:       https://bugs.php.net/fix.php?id=79968&r=float
No Zend Extensions:               https://bugs.php.net/fix.php?id=79968&r=nozend
MySQL Configuration Error:        https://bugs.php.net/fix.php?id=79968&r=mysqlcfg


Thread (4 messages)

« previous php.bugs (#228566) next »