#23285 [Ver->Fbk]: zendlex coredump

ID: 23285 Updated by: wez@php.net Reported By: momo@php.net -Status: Verified +Status: Feedback Bug Type: Scripting Engine problem Operating System: RH9 PHP Version: 4.3.3-dev New Comment: Try this patch: http://www.php.net/~wez/zendlex.diff Previous Comments: ------------------------------------------------------------------------ [2003-05-25 06:37:02] momo@php.net the bug still exists using gcc version 3.2.2 20030222 here how u can easly reproduce it: [root@moshe-lap php4]# cat ../../gen-php-seg.php <? $p = fopen("tmp","wb"); $str=""; for($a=0;$a<1024;$a++) $str.="/**/ "; fwrite($p,"<? "); for($a=0;$a<512;$a++) fwrite($p,$str); fwrite($p," ?> "); fclose($p); ?> [root@moshe-lap php4]# ./sapi/cli/php ../../tmp Segmentation fault ------------------------------------------------------------------------ [2003-05-21 10:15:04] sniper@php.net It still happens for me (using gcc 2.95.3).. ------------------------------------------------------------------------ [2003-05-20 19:19:42] iliaa@php.net Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip It appears recent changes have resolved this bug. ------------------------------------------------------------------------ [2003-04-20 05:42:21] momo@php.net coz the zendlex() function is recursive for some cases, it's quite easy dumping zend core. e.g, just repeat the comments enough times on the following script (i did it 500,000 times but may less is nedded): <? /**/ /**/ /*....... /**/ ?> is this consider a bug? ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=23285&edit=1