PHP 4.0 Bug #2883: Leak & Mem-Overwrite in libzend (with testcase)
| From: | thies at digicol dot de | Date: | Wed, 01 Dec 1999 13:18:29 +0000 |
| Subject: | PHP 4.0 Bug #2883: Leak & Mem-Overwrite in libzend (with testcase) | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-13327@lists.php.net to get a copy of this message | ||
From: thies@digicol.de
Operating system: all
PHP version: 4.0 Latest CVS (01/12/1999)
PHP Bug Type: Scripting Engine problem
Bug description: Leak & Mem-Overwrite in libzend (with testcase)
<?
$qparams = array("andi");
isset($qparams[ 0 ][ "zeev" ]);
?>
[Wed Dec 1 14:16:47 1999] Script: '../crash/index.php'
---------------------------------------
/dot/dc4/zend/php-dev/php4_cgi_debug/../php4/libzend/zend_execute_API.c(207) : Block 0x001B8F28
status:
Beginning: Overrun (magic=0x00000046, expected=0x7312F8DC)
End: Unknown
---------------------------------------
[Wed Dec 1 14:16:47 1999] Script: '../crash/index.php'
---------------------------------------
/dot/dc4/zend/php-dev/php4_cgi_debug/../php4/libzend/zend_opcode.c(165) : Block 0x001BE950 status:
/dot/dc4/zend/php-dev/php4_cgi_debug/../php4/libzend/zend_variables.c(62) : Actual location
(location was relayed)
Beginning: Cached (allocated on
/dot/dc4/zend/php-dev/php4_cgi_debug/../php4/libzend/zend-scanner.l:1227, 5 bytes)
End: OK
---------------------------------------
/dot/dc4/zend/php-dev/php4_cgi_debug/../php4/libzend/zend_execute.c(692) : Freeing 0x001BFE60
<> (16 bytes), script=../crash/index.php
Last leak repeated 1 time