#26160 [Com]: imap_fetch_overview crashes on certain malformed messages

ID: 26160 Comment by: jw at jwscripts dot com Reported By: dkoopman at godaddy dot com Status: No Feedback Bug Type: Reproducible crash Operating System: RH 9.0 PHP Version: 4.3.2 New Comment: tried it with the latest snapshot (Version 4.3.5RC2-dev) on a Windows system and the problem seems to be fixed. Will try it on an unix system also and report my findings. BTW, if you want to reproduce this bug, just cut and paste the following source, which will produce a mail as mentioned, into a file: http://www.jwscripts.com/playground/sendoffending.php Previous Comments: ------------------------------------------------------------------------ [2003-11-17 18:18:15] sniper@php.net No feedback was provided. The bug is being suspended because we assume that you are no longer experiencing the problem. If this is not the case and you are able to provide the information that was requested earlier, please do so and change the status of the bug back to "Open". Thank you. ------------------------------------------------------------------------ [2003-11-06 20:59:09] iliaa@php.net Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip ------------------------------------------------------------------------ [2003-11-06 20:44:19] dkoopman at godaddy dot com Description: ------------ This email will crash imap_fetch_overview and make apache report a segmentation fault: [notice] child pid 6249 exit signal Segmentation fault (11) (notice the malformed To line): Subject: This message will crash imap_fetch_overview function To: <xxxxxxxxx@xxxxxxxxxxx, xxxxxxxxxx@xxxxxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxx, xxxx@xxxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxx, xxxxx@xxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxxxxx, xxxxxxxx@xxxxxxxxxxxxxxxxx, xxxxx@xxxxxxxxxxxxxx, xxx@xxxxxxxxxxxx, xxxxxx@xxxxxxxxxxxxx, xx@xxxxxxxxxxxxxxxxxxxxxx, xxxxx@xxxxxxxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxx, xxxxxxxxx@xxxxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxxx, xxx@xxxxxxxxxxxxxxx, xxxxxxxxx@xxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxx, xxxxxxxxxx@xxxxxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxx, xxxxxxxxx@xxxxxxxxxxxx, xxx@xxxxxxxxxxxxxxxxxxxxxx, xxxxx@xxxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxxx, xxxx@xxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxxx, xxxxxxxxx@xxxxxxx, xxxxxxxxx@xxxxxxxxxxxxxxxxxx, xxxxxxxx@xxxxxxxxxxx, xxxxx@xxxxxxxxxxxxxxxxxxxx, xxxxxxxxx@xxxxxxx, xxxxxxxxxx@xxxxxx, xxxxxxx@xxxxxxxxxxx, xxxxxxxx@xxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxx, xxxxxxxx@xxxxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxxxxxxx, xxxxxxxxx@xxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxx, xxxxx@xxxxxxxxxxx, xxxxxxx@xxxxxxxxxxx, xxxxxxxxxxxxx@xxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxx, xxxxxx@xxxxxxxxxxx, xxxxxxxxxx@xxxxxxxxx, xxxxx@xxxxxxxxxxxxxxx, xxxxxxx@xxxxxxxxxxxxxxxxxxx, xxxxxxxxxxxxxxx@xxxxxxx, xxxxxxxxx@xxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxxxxxx, xxxxxxxx@xxxxxxxxxxxxxxxx, xxxx@xxxxxxxxxxxxxxxx, xxxxx@xxxxxxxx xxxxxxxxx, xxx@xxxxxxxxxx, xxxxxxxxxx@xxxxxxxxxxxxx, xxxxxxxx@xxxxxxxxxx, xxxxxxxx@xxxxxxxxxxxxxxxxx, xxxxxx@xxxxxxxxxxxxxxxxxxx, xxxxxxx@xxxxxxxx From: test@koopman.com test Reproduce code: --------------- see description Expected result: ---------------- see description Actual result: -------------- see description ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=26160&edit=1