#23285 [Fbk->Asn]: zendlex coredump

ID: 23285 Updated by: sniper@php.net Reported By: momo@php.net -Status: Feedback +Status: Assigned Bug Type: Scripting Engine problem Operating System: RH9 PHP Version: 4.3.3-dev -Assigned To: +Assigned To: wez New Comment: Yes, that patch makes it not to crash anymore. If there aren't any side-effects of it..commit? :) Previous Comments: ------------------------------------------------------------------------ [2003-05-28 16:39:52] wez@php.net Try this patch: http://www.php.net/~wez/zendlex.diff ------------------------------------------------------------------------ [2003-05-25 06:37:02] momo@php.net the bug still exists using gcc version 3.2.2 20030222 here how u can easly reproduce it: [root@moshe-lap php4]# cat ../../gen-php-seg.php <? $p = fopen("tmp","wb"); $str=""; for($a=0;$a<1024;$a++) $str.="/**/ "; fwrite($p,"<? "); for($a=0;$a<512;$a++) fwrite($p,$str); fwrite($p," ?> "); fclose($p); ?> [root@moshe-lap php4]# ./sapi/cli/php ../../tmp Segmentation fault ------------------------------------------------------------------------ [2003-05-21 10:15:04] sniper@php.net It still happens for me (using gcc 2.95.3).. ------------------------------------------------------------------------ [2003-05-20 19:19:42] iliaa@php.net Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip It appears recent changes have resolved this bug. ------------------------------------------------------------------------ [2003-04-20 05:42:21] momo@php.net coz the zendlex() function is recursive for some cases, it's quite easy dumping zend core. e.g, just repeat the comments enough times on the following script (i did it 500,000 times but may less is nedded): <? /**/ /**/ /*....... /**/ ?> is this consider a bug? ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=23285&edit=1