#23285 [Opn]: zendlex coredump

ID: 23285 Updated by: momo@php.net -Summary: 19292 is back (open_basdir restriction)! Reported By: momo@php.net Status: Open Bug Type: Scripting Engine problem Operating System: RH9 PHP Version: 4.3.2-RC4 New Comment: mozilla cache... sorry for the header. Previous Comments: ------------------------------------------------------------------------ [2003-05-25 06:37:02] momo@php.net the bug still exists using gcc version 3.2.2 20030222 here how u can easly reproduce it: [root@moshe-lap php4]# cat ../../gen-php-seg.php <? $p = fopen("tmp","wb"); $str=""; for($a=0;$a<1024;$a++) $str.="/**/ "; fwrite($p,"<? "); for($a=0;$a<512;$a++) fwrite($p,$str); fwrite($p," ?> "); fclose($p); ?> [root@moshe-lap php4]# ./sapi/cli/php ../../tmp Segmentation fault ------------------------------------------------------------------------ [2003-05-24 01:22:09] sniper@php.net No feedback was provided. The bug is being suspended because we assume that you are no longer experiencing the problem. If this is not the case and you are able to provide the information that was requested earlier, please do so and change the status of the bug back to "Open". Thank you. ------------------------------------------------------------------------ [2003-05-21 10:15:04] sniper@php.net It still happens for me (using gcc 2.95.3).. ------------------------------------------------------------------------ [2003-05-20 19:19:42] iliaa@php.net Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip It appears recent changes have resolved this bug. ------------------------------------------------------------------------ [2003-04-20 05:42:21] momo@php.net coz the zendlex() function is recursive for some cases, it's quite easy dumping zend core. e.g, just repeat the comments enough times on the following script (i did it 500,000 times but may less is nedded): <? /**/ /**/ /*....... /**/ ?> is this consider a bug? ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=23285&edit=1