#28875 [NEW]: Wrong regex crashes server

From: amoljak at cox dot net Operating system: Windows 2000 Server PHP version: 4.3.6 PHP Bug Type: Reproducible crash Bug description: Wrong regex crashes server Description: ------------ Note the extra ] in the regex. Try to load this page three times and it will crash the third time. Reproduce code: --------------- <?php $filecontent = "my name is amol"; $regex = "/(^|[^a-zA-Z0-9-])([Nn]on[-s? []]]degrees? [Ss]tudents?)([^a-zA-Z0-9-]|$)/es"; //preg_match_all($regex, $filecontent , $matches, PREG_OFFSET_CAPTURE); preg_match($regex, $filecontent , $matches, PREG_OFFSET_CAPTURE); print "matches = $matches<br>"; ?> Expected result: ---------------- This is from end user's code and I don't know what he expected. But he was able to crash the server... thats bad. -- Edit bug report at http://bugs.php.net/?id=28875&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=28875&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=28875&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=28875&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=28875&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=28875&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=28875&r=needscript Try newer version: http://bugs.php.net/fix.php?id=28875&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=28875&r=support Expected behavior: http://bugs.php.net/fix.php?id=28875&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=28875&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=28875&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=28875&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=28875&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=28875&r=dst IIS Stability: http://bugs.php.net/fix.php?id=28875&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=28875&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=28875&r=float