[suspicious - maybe spam] #31635 [NEW]: Unsafe coding practice

From: Date: Fri, 21 Jan 2005 14:15:05 +0000
Subject: [suspicious - maybe spam] #31635 [NEW]: Unsafe coding practice
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-72590@lists.php.net to get a copy of this message 
From:             ivar at stvk dot no
Operating system: Irrelevant (WinXP)
PHP version:      5.0.3
PHP Bug Type:     Zend Engine 2 problem
Bug description:  Unsafe coding practice

Description:
------------
zend_make_printable_zval:

Before returning with *use_copy=1, this function assumes that the
preceding code has successfully converted the value to a sting, and
therefore sets expr_copy->type = IS_STRING.

If the original value IS_OBJECT, this function relies on any 3rd party
cast handler to successfully return a string.
Some libraries have been observed to break this rule, and return a value
only initialized by ZVAL_NULL. This makes the system try to print a string
from a garbage pointer.


-- 
Edit bug report at http://bugs.php.net/?id=31635&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=31635&r=trysnapshot4
Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=31635&r=trysnapshot50
Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=31635&r=trysnapshot51
Fixed in CVS:                http://bugs.php.net/fix.php?id=31635&r=fixedcvs
Fixed in release:            http://bugs.php.net/fix.php?id=31635&r=alreadyfixed
Need backtrace:              http://bugs.php.net/fix.php?id=31635&r=needtrace
Need Reproduce Script:       http://bugs.php.net/fix.php?id=31635&r=needscript
Try newer version:           http://bugs.php.net/fix.php?id=31635&r=oldversion
Not developer issue:         http://bugs.php.net/fix.php?id=31635&r=support
Expected behavior:           http://bugs.php.net/fix.php?id=31635&r=notwrong
Not enough info:             http://bugs.php.net/fix.php?id=31635&r=notenoughinfo
Submitted twice:             http://bugs.php.net/fix.php?id=31635&r=submittedtwice
register_globals:            http://bugs.php.net/fix.php?id=31635&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=31635&r=php3
Daylight Savings:            http://bugs.php.net/fix.php?id=31635&r=dst
IIS Stability:               http://bugs.php.net/fix.php?id=31635&r=isapi
Install GNU Sed:             http://bugs.php.net/fix.php?id=31635&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=31635&r=float
No Zend Extensions:          http://bugs.php.net/fix.php?id=31635&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=31635&r=mysqlcfg

Thread (12 messages)

« previous php.bugs (#72590) next »