PHP 4.0 Bug #7721: Crash when when receiving multipart/mime form

From: sven@devcon.net Operating system: freebsd PHP version: Earlier? Upgrade first! PHP Bug Type: Reproduceable crash Bug description: Crash when when receiving multipart/mime form Try to post a multipart-mime/form. php 3.0.17 crahes: Program received signal SIGSEGV, Segmentation fault. 0x280e4145 in strlen () from /usr/lib/libc.so.4 (gdb) bt #0 0x280e4145 in strlen () from /usr/lib/libc.so.4 #1 0x8162002 in ?? () #2 0x28459d74 in php3_getpost (http_post_vars=0xbfbfe544) at functions/post.c:239 #3 0x2845a4b2 in php3_treat_data () at functions/post.c:269 #4 0x284257f9 in _php3_hash_environment () at main.c:1188 #5 0x284855b4 in lex_scan () at language-scanner.lex:149 #6 0x2842cd47 in read_next_token () at token_cache.c:238 #7 0x28423a2d in phplex () at main.c:145 #8 0x284800c8 in phpparse () at /usr/lib/bison.simple:761 #9 0x28425dee in php3_parse (yyin=0x28165378) at main.c:1566 #10 0x284261dd in apache_php3_module_main () at main.c:1578 #11 0x2842231e in send_php3 () at ./mod_php3.c:519 #12 0x284223ce in send_parsed_php3 () at ./mod_php3.c:519 #13 0x8053f69 in ap_invoke_handler (r=0x8125034) at http_config.c:516 #14 0x8068408 in process_request_internal (r=0x8125034) at http_request.c:1282 #15 0x8068472 in ap_process_request (r=0x8125034) at http_request.c:1298 #16 0x805f6d3 in child_main (child_num_arg=0) at http_main.c:4203 #17 0x805f891 in make_child (s=0x80ab034, slot=0, now=973772542) at http_main.c:4307 #18 0x805fa0a in startup_children (number_to_start=5) at http_main.c:4389 #19 0x8060014 in standalone_main (argc=2, argv=0xbfbff874) at http_main.c:4677 #20 0x806082c in main (argc=2, argv=0xbfbff874) at http_main.c:5004 Quite the same happens under Linux. -- Edit Bug report at: http://bugs.php.net/?id=7721&edit=1