#26160 [NEW]: imap_fetch_overview crashes on certain malformed messages

From: Date: Fri, 07 Nov 2003 01:44:19 +0000
Subject: #26160 [NEW]: imap_fetch_overview crashes on certain malformed messages
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-50105@lists.php.net to get a copy of this message
From:             dkoopman at godaddy dot com
Operating system: RH 9.0
PHP version:      4.3.2
PHP Bug Type:     Reproducible crash
Bug description:  imap_fetch_overview crashes on certain malformed messages

Description:
------------
This email will crash imap_fetch_overview and make apache report a
segmentation fault:
[notice] child pid 6249 exit signal Segmentation fault (11)

(notice the malformed To line):

Subject: This message will crash imap_fetch_overview function
To: <xxxxxxxxx@xxxxxxxxxxx, xxxxxxxxxx@xxxxxxxxxxxxxxxx,
        xxxxxx@xxxxxxxxxxxxxxx, xxxx@xxxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxx,
        xxxxx@xxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxxxxx,
        xxxxxxxx@xxxxxxxxxxxxxxxxx, xxxxx@xxxxxxxxxxxxxx,
xxx@xxxxxxxxxxxx,
        xxxxxx@xxxxxxxxxxxxx, xx@xxxxxxxxxxxxxxxxxxxxxx,
        xxxxx@xxxxxxxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxxxxxxx,
        xxxxxx@xxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxx,
xxxxxxxxx@xxxxxxxxxxxxx,
        xxxxxxx@xxxxxxxxxxxxx, xxx@xxxxxxxxxxxxxxx, xxxxxxxxx@xxxxxxxxx,
        xxxxxx@xxxxxxxxxxxxxxx, xxxxxxxxxx@xxxxxxxxxxxxxxxx,
        xxxxxx@xxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxxxxxxxxx,
        xxxx@xxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxxxxxxx,
        xxxx@xxxxxxxxxxxxxxxx, xxxxxxxxx@xxxxxxxxxxxx,
        xxx@xxxxxxxxxxxxxxxxxxxxxx, xxxxx@xxxxxxxxxxxx,
xxxxxxx@xxxxxxxxxxxxx,
        xxxx@xxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxxx, xxxxxxxxx@xxxxxxx,
        xxxxxxxxx@xxxxxxxxxxxxxxxxxx, xxxxxxxx@xxxxxxxxxxx,
        xxxxx@xxxxxxxxxxxxxxxxxxxx, xxxxxxxxx@xxxxxxx, xxxxxxxxxx@xxxxxx,
        xxxxxxx@xxxxxxxxxxx, xxxxxxxx@xxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxx,
        xxxxxxxx@xxxxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxxxxxxx,
        xxxxxxxxx@xxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxx, xxxxx@xxxxxxxxxxx,
        xxxxxxx@xxxxxxxxxxx, xxxxxxxxxxxxx@xxxxxxxxxxx,
xxxxxxx@xxxxxxxxxxxxxx,
        xxxx@xxxxxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxx, xxxxxx@xxxxxxxxxxx,
        xxxxxxxxxx@xxxxxxxxx, xxxxx@xxxxxxxxxxxxxxx,
        xxxxxxx@xxxxxxxxxxxxxxxxxxx, xxxxxxxxxxxxxxx@xxxxxxx,
        xxxxxxxxx@xxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxxxxxx,
        xxxxxxxx@xxxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxx,
        xxxxx@xxxxxxxx xxxxxxxxx, xxx@xxxxxxxxxx,
xxxxxxxxxx@xxxxxxxxxxxxx,
        xxxxxxxx@xxxxxxxxxx, xxxxxxxx@xxxxxxxxxxxxxxxxx,
        xxxxxx@xxxxxxxxxxxxxxxxxxx, xxxxxxx@xxxxxxxx
From: test@koopman.com

test


Reproduce code:
---------------
see description

Expected result:
----------------
see description

Actual result:
--------------
see description

-- 
Edit bug report at http://bugs.php.net/?id=26160&edit=1
-- 
Try a CVS snapshot (php4):  http://bugs.php.net/fix.php?id=26160&r=trysnapshot4
Try a CVS snapshot (php5):  http://bugs.php.net/fix.php?id=26160&r=trysnapshot5
Fixed in CVS:               http://bugs.php.net/fix.php?id=26160&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=26160&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=26160&r=needtrace
Try newer version:          http://bugs.php.net/fix.php?id=26160&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=26160&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=26160&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=26160&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=26160&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=26160&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=26160&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=26160&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=26160&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=26160&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=26160&r=float


Thread (4 messages)

« previous php.bugs (#50105) next »