#36350 [NEW]: php 4.4.2 remote fopen php4ts access violation crash

From: valexa at nextcode dot org Operating system: Windows NT 2k/xp PHP version: 4.4.2 PHP Bug Type: Sockets related Bug description: php 4.4.2 remote fopen php4ts access violation crash Description: ------------ How i tested : tested on win200 and winxp , official binary releases virgin unmodified , tested also with no extensions loaded , same behaviour , tested also with the 4.4.1 php4ts.dll on 4.4.2 , no crash Upon running any php script that reads a url/remote file i get a crash in php 4.4.2 The instruction at "0x100c5fca" referenced memory at "0x00000035". The memory could not be "read". Unhandled exception in php.exe (PHP4TS.DLL): 0xC0000005: Access Violation. assembly dump folows 100C5FAB mov eax,dword ptr [esi+8] 100C5FAE or eax,80000000h 100C5FB3 mov dword ptr [esi+8],eax 100C5FB6 pop esi 100C5FB7 ret 100C5FB8 mov eax,[10161E18] 100C5FBD test eax,eax 100C5FBF je 100C5FC3 100C5FC1 call eax 100C5FC3 mov edx,dword ptr [edi] 100C5FC5 mov eax,[10161D8C] 100C5FCA mov eax,dword ptr [edx+eax*4-4] <<<<-crashes here 100C5FCE cmp esi,dword ptr [eax] 100C5FD0 jne 100C5FD8 100C5FD2 mov ecx,dword ptr [esi] 100C5FD4 mov dword ptr [eax],ecx 100C5FD6 jmp 100C5FDF 100C5FD8 mov edx,dword ptr [esi+4] 100C5FDB mov eax,dword ptr [esi] 100C5FDD mov dword ptr [edx],eax 100C5FDF mov eax,dword ptr [esi] 100C5FE1 test eax,eax 100C5FE3 je 100C5FEB Reproduce code: --------------- <html> <?php echo "crash now"; $available = file ('http://www.php.net/downloads.php'); echo "hadn't crashed"; ?> </html> Expected result: ---------------- C:\php-4.4.1-Win32>php bug.php X-Powered-By: PHP/4.4.1 Content-type: text/html </html> crash nowhadn't crashed</html> C:\php-4.4.1-Win32> Actual result: -------------- C:\php-4.4.2-Win32>php bug.php X-Powered-By: PHP/4.4.2 Content-type: text/html </html> crash now C:\php-4.4.2-Win32> -- Edit bug report at http://bugs.php.net/?id=36350&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=36350&r=trysnapshot44 Try a CVS snapshot (PHP 5.1): http://bugs.php.net/fix.php?id=36350&r=trysnapshot51 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=36350&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=36350&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=36350&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=36350&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=36350&r=needscript Try newer version: http://bugs.php.net/fix.php?id=36350&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=36350&r=support Expected behavior: http://bugs.php.net/fix.php?id=36350&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=36350&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=36350&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=36350&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=36350&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=36350&r=dst IIS Stability: http://bugs.php.net/fix.php?id=36350&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=36350&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=36350&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=36350&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=36350&r=mysqlcfg