#23090 [Opn]: imap crashes with large To: list

ID: 23090 User updated by: travis at deakin dot edu dot au Reported By: travis at deakin dot edu dot au Status: Open Bug Type: IMAP related -Operating System: Linxu +Operating System: Linux PHP Version: 4.3.2-RC New Comment: fixed os typo Previous Comments: ------------------------------------------------------------------------ [2003-04-09 00:07:19] travis at deakin dot edu dot au I tried taking the zend_hash.c from 4.2.1 and put it into 4.3.2RC1 and recompiled and retested and the problem still occurred. ------------------------------------------------------------------------ [2003-04-08 23:52:37] travis at deakin dot edu dot au I've tried to build up 4.2.1 to test this but as I am using apache2 this is not really an option for us. ------------------------------------------------------------------------ [2003-04-08 00:59:51] travis at deakin dot edu dot au I downloaded the cvs snapshot as suggested and configured/compiled/installed the cvs snapshot up and unfortunately the problem is still there. ------------------------------------------------------------------------ [2003-04-07 18:02:10] sniper@php.net Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip ------------------------------------------------------------------------ [2003-04-07 10:44:35] gale at gtk dot org Here's a backtrace. Looks like something is scribbling over memory. Have reproduced this on 4.3.1 and 4.2.3. However, 4.2.1 doesn't have this issue. #0 0x352b50 in chunk_alloc (ar_ptr=0x401680, nb=56) at malloc.c:2948 #1 0x3521ce in __libc_malloc (bytes=52) at malloc.c:2696 #2 0x813e309 in _emalloc (size=35) at zend_alloc.c:165 #3 0x8153a87 in zend_hash_index_update_or_next_insert (ht=0x84cb1cc, h=6, pData=0xbfff72f8, nDataSize=4, pDest=0x0, flag=4) at zend_hash.c:404 #4 0x80c92fc in _php_imap_parse_address (addresslist=0x84bf7e8, fulladdress=0xbfff7328, paddress=0x84cb1ac) at php_imap.c:268 #5 0x80c94a8 in _php_make_header_object (myzvalue=0x84cac24, en=0x84bf388) at php_imap.c:3666 #6 0x80c1c6a in zif_imap_headerinfo (ht=2, return_value=0x84cac24, this_ptr=0x0, return_value_used=1) at php_imap.c:1631 #7 0x816d871 in execute (op_array=0x8478114) at ./zend_execute.c:1598 #8 0x816da36 in execute (op_array=0x842fee4) at ./zend_execute.c:1638 #9 0x816da36 in execute (op_array=0x83d3134) at ./zend_execute.c:1638 #10 0x816da36 in execute (op_array=0x8392704) at ./zend_execute.c:1638 #11 0x814f3b6 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at zend.c:812 #12 0x80b5cba in php_execute_script (primary_file=0xbffff814) at main.c:1383 #13 0x815a037 in apache_php_module_main (r=0x834fcac, display_source_mode=0) at sapi_apache.c:90 #14 0x80b2316 in send_php () #15 0x80b23a4 in send_parsed_php () #16 0x81798a3 in ap_invoke_handler () #17 0x81936d9 in process_request_internal () #18 0x8193781 in ap_process_request () #19 0x81892ee in child_main () #20 0x818957f in make_child () #21 0x8189673 in startup_children () #22 0x8189d96 in standalone_main () ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/23090 -- Edit this bug report at http://bugs.php.net/?id=23090&edit=1