#28461 [Asn->Fbk]: segmentation fault when using backreferences on a long string

ID: 28461 Updated by: tony2001@php.net Reported By: xanthor at xanthor dot tk -Status: Assigned +Status: Feedback Bug Type: PCRE related Operating System: * PHP Version: 5CVS, 4CVS (2005-05-30) Assigned To: andrei New Comment: Please try using this CVS snapshot: http://snaps.php.net/php5-latest.tar.gz For Windows: http://snaps.php.net/win32/php5-win32-latest.zip Can't reproduce with latest PHP4 and PHP5 snapshots (PCRE was upgraded to 5.0, this might have fixed it). Previous Comments: ------------------------------------------------------------------------ [2004-12-09 14:57:59] jorton@php.net This is the standard "PCRE uses on-stack recursion" bug which has been filed and closed umpteen times. To reproduce just increase the length of the string until exhausts your stack space. One way PHP could mitigate the issue is to to set the match_limit field in the pcre_extra structure which puts a limit on the depth of the stack recursion. ------------------------------------------------------------------------ [2004-12-09 14:13:26] xanthor at xanthor dot tk Still segfault with PHP 4.3.10RC2 and PCRE Library Version 4.5 01-December-2003 ------------------------------------------------------------------------ [2004-12-06 16:17:35] tony2001@php.net Can't reproduce with any of dev versions (tried latest 4.3.10-dev, 5.1.0-dev & 5.0.3-dev under Linux). Please, try latest snapshots and tell me what version of pcre you're using (mine is 3.9) if you're still able to reproduce it. ------------------------------------------------------------------------ [2004-09-28 10:41:22] xanthor at xanthor dot tk The regexs still crash PHP 4.3.9 and PHP 5.0.2 ------------------------------------------------------------------------ [2004-09-16 15:50:47] nlopess@php.net your last regex crashes PHP 5 also. The segfault isn't in PHP but in pcre (this is quite normal due to the NFA nature of pcre). ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/28461 -- Edit this bug report at http://bugs.php.net/?id=28461&edit=1