Bug #16940 Updated: openssl_private_decrypt segsev

ID: 16940 Updated by: wez@php.net Reported By: isilva@-NOSPAM-iis.com.br -Status: Feedback +Status: Closed Bug Type: OpenSSL related Operating System: Slackware Linux 2.4.18 PHP Version: 4.2.0 New Comment: I was just about to write what you mentioned but my connection dropped. The fix was already in CVS HEAD, but not in 4.2. Thanks for your help in reporting this: the fix will be in 4.2.1. Previous Comments: ------------------------------------------------------------------------ [2002-05-01 04:01:29] isilva@-NOSPAM-iis.com.br I did saw that error and thought that that was the error at first, but was not successfull. initializing cryptedbuf as NULL did solve the problem. Thanks for the help. ------------------------------------------------------------------------ [2002-05-01 03:59:45] isilva@-NOSPAM-iis.com.br I did found the error. cryptedbuf should be initialized as NULL, but was being initialized as a normal, out of bounds pointer. lines 2362 and 2483, where is written unsigned char *cryptedbuf; should be unsigned char *cryptedbuf = NULL; That solve the problem. ------------------------------------------------------------------------ [2002-05-01 03:58:11] wez@php.net I believe that I have found the problem; the zend_error call uses a %s format specifier, but does not provide a string to print out. I've committed a fix; please try a stable snapshot from snaps.php.net created some time after this report is dated (to make sure you have one with the fix). ------------------------------------------------------------------------ [2002-05-01 03:34:52] wez@php.net Please include a short script that reproduces this error. ------------------------------------------------------------------------ [2002-05-01 03:15:44] isilva@-NOSPAM-iis.com.br will try to fix. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/16940 -- Edit this bug report at http://bugs.php.net/?id=16940&edit=1