#20254 [Opn]: imap_header() crash with bad Reply-To

ID: 20254 User updated by: woonuk@xenoinfo.com Reported By: woonuk@xenoinfo.com Status: Open Bug Type: IMAP related Operating System: Linux (2.4.18) PHP Version: 4.2.3 New Comment: Here gdb backtrace. (gdb) run -X Starting program: /usr/local/apache2/bin/httpd -X [New Thread 1024 (LWP 21817)] Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 1024 (LWP 21817)] 0x402df6dc in chunk_free () from /lib/libc.so.6 (gdb) bt #0 0x402df6dc in chunk_free () from /lib/libc.so.6 #1 0x402df548 in free () from /lib/libc.so.6 #2 0x404583a7 in _php_make_header_object (myzvalue=0x823b188, en=0x82444a8, tsrm_ls=0x8186838) at php_imap.c:3724 #3 0x4044d232 in zif_imap_headerinfo (ht=2, return_value=0x823b188, this_ptr=0x0, return_value_used=1, tsrm_ls=0x8186838) at php_imap.c:1631 #4 0x403fd5f0 in execute (op_array=0x81e1d08, tsrm_ls=0x8186838) at ./zend_execute.c:1598 #5 0x404100ed in zend_execute_scripts (type=8, tsrm_ls=0x8186838, retval=0x0, file_count=3) at zend.c:812 #6 0x404236fd in php_execute_script (primary_file=0xbffff730, tsrm_ls=0x8186838) at main.c:1383 #7 0x4041e959 in php_output_filter (f=0x81d9980, bb=0x81d9ef0) at sapi_apache2.c:409 #8 0x080ac5a7 in ap_pass_brigade (next=0x81d9980, bb=0x81d9ab0) at util_filter.c:540 #9 0x080b2868 in default_handler (r=0x81ce7b0) at core.c:3317 #10 0x080a1bd6 in ap_run_handler (r=0x81ce7b0) at config.c:194 #11 0x080a20f1 in ap_invoke_handler (r=0x81ce7b0) at config.c:401 #12 0x08084e93 in ap_process_request (r=0x81ce7b0) at http_request.c:288 #13 0x080810b8 in ap_process_http_connection (c=0x81ca3b0) at http_core.c:293 #14 0x080aa6b6 in ap_run_process_connection (c=0x81ca3b0) at connection.c:85 #15 0x080a0889 in child_main (child_num_arg=0) at prefork.c:696 #16 0x080a093c in make_child (s=0x812b950, slot=0) at prefork.c:736 #17 0x080a0a26 in startup_children (number_to_start=5) at prefork.c:808 #18 0x080a0d28 in ap_mpm_run (_pconf=0x80e8690, plog=0x8126788, s=0x812b950) at prefork.c:1024 #19 0x080a5dab in main (argc=2, argv=0xbffffa44) at main.c:643 #20 0x402821c4 in __libc_start_main () from /lib/libc.so.6 (gdb) Previous Comments: ------------------------------------------------------------------------ [2002-11-05 01:52:28] woonuk@xenoinfo.com imap_header() quietly crashes. This sample message have bad Reply-To header. machine A) php : 4.2.3 c-client : imap-2001a apache : 1.3.26 machine B) php : 4.2.3 c-client : imap-2002.RC10 apache : 2.0.42 above two machine got same result. -- Return-Path: <root@home.xenoinfo.com> Delivered-To: home.xenoinfo.com-woonuk@home.xenoinfo.com Received: (qmail 2862 invoked by uid 0); 5 Nov 2002 16:36:11 +0900 Date: 5 Nov 2002 16:36:11 +0900 Message-ID: <20021105073611.2861.qmail@home.xenoinfo.com> From: root@home.xenoinfo.com To: woonuk@home.xenoinfo.com Reply-To: <> Subject: This is Subject This is body. -- ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=20254&edit=1