#38050 [Fbk->Opn]: preg_match_all segfault

ID: 38050 User updated by: taak@php.net Reported By: taak@php.net -Status: Feedback +Status: Open Bug Type: Reproducible crash Operating System: debian linux PHP Version: 5.1.4 New Comment: Tried using php5.2-200607101230, the repro script does NOT segfault using this snap. However, it still segfaults in the program context from which it was originally extracted. Will try to come up with another repro script. Previous Comments: ------------------------------------------------------------------------ [2006-07-10 07:51:42] tony2001@php.net Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://snaps.php.net/win32/php5.2-win32-latest.zip ------------------------------------------------------------------------ [2006-07-10 00:36:37] taak@php.net Here it is at another paste site: http://rafb.net/paste/results/UPIlO785.txt I have many other bunches of text that also crash for that pattern. I'll try this one on 5.2 also ------------------------------------------------------------------------ [2006-07-09 23:59:58] judas dot iscariote at gmail dot com your test do not segfault here(Linux 64 bit current 5_2 CVS) ------------------------------------------------------------------------ [2006-07-09 19:40:30] tony2001@php.net Unfortunately pastebin.com is down atm. Please provide short but complete reproduce script here. ------------------------------------------------------------------------ [2006-07-09 19:32:54] taak@php.net Description: ------------ preg_match_all segfaults on some text samples with the following pattern: #<a(?=[\s/>]+)(?:"[^"]*"|'[^']*'|[^'">])*?\bhref\s?=\s?"([^"]+)"(?:"[^"]*"|'[^']*\'|[^'">])*?>((?:.(?!</a>))*.?)</a>#ism Pastebin code includes an example text sample. Reproduced on i386 linux 5.1.4 built from source but NOT a mac ppc build with the same compile flags, or on 4.3.10. Reproduce code: --------------- http://pastebin.com/743927 ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=38050&edit=1