cvs: php4(PHP_4_3) / TODO_SEGFAULTS
| From: | Sascha Schumann | Date: | Thu, 03 Apr 2003 19:33:56 +0000 |
| Subject: | cvs: php4(PHP_4_3) / TODO_SEGFAULTS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-20047@lists.php.net to get a copy of this message | ||
sas Thu Apr 3 14:33:56 2003 EDT
Modified files: (Branch: PHP_4_3)
/php4 TODO_SEGFAULTS
Log:
add chunk_split
Index: php4/TODO_SEGFAULTS
diff -u php4/TODO_SEGFAULTS:1.1.2.19 php4/TODO_SEGFAULTS:1.1.2.20
--- php4/TODO_SEGFAULTS:1.1.2.19 Thu Apr 3 14:21:50 2003
+++ php4/TODO_SEGFAULTS Thu Apr 3 14:33:55 2003
@@ -22,6 +22,7 @@
the dbase extension (1)
mb_strcut('', 2147483647); (2)
+ chunk_split (3)
(1) heap corruption, mostly visible in malloc-related calls. Whether you see
this or not might depend on your libc/compiler. Hard to track down,
@@ -47,7 +48,10 @@
at /home/sas/src/php4/ext/mbstring/mbfilter.c:8258
8258 (*encoder->filter_function)(*p++, encoder TSRMLS_CC);
-
+
+(3) integer overflow in php_chunk_split
+
+
Methodology
1. Use a plain PHP_4_3 tree