Bug #10400: output_transform_file pointer in sablot.c MUST be initialized to NULL in php_sablot_init_globals, and S_FREE macro MUST set the pointer it
frees to NULL after freeing. Otherwise xslt_begintransform clobbers memory at a random location causing memory corruption and segfaults apache after
a few requests. More info, a working patch and an example that causes the problem is available on request. These two changes has made it perfectly
reliable for me in version 4.0.4.5rc6-2 (debian package source version).
| From: | lsorense at csclub dot uwaterloo dot ca | Date: | Thu, 19 Apr 2001 13:01:13 +0000 |
| Subject: | Bug #10400: output_transform_file pointer in sablot.c MUST be initialized to NULL in php_sablot_init_globals, and S_FREE macro MUST set the pointer it frees to NULL after freeing. Otherwise xslt_begintransform clobbers memory at a random location causing memory corruption and segfaults apache after a few requests. More info, a working patch and an example that causes the problem is available on request. These two changes has made it perfectly reliable for me in version 4.0.4.5rc6-2 (debian package source version). |
||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-51952@lists.php.net to get a copy of this message | ||
From: lsorense@csclub.uwaterloo.ca
Operating system: Linux
PHP version: 4.0.4pl1
PHP Bug Type: Sablotron XSL
Bug description: output_transform_file pointer in sablot.c MUST be initialized to NULL in
php_sablot_init_globals, and S_FREE macro MUST set the pointer it frees to NULL after freeing.
Otherwise xslt_begintransform clobbers memory at a random location causing memory corruption and
segfaults apache after a few requests. More info, a working patch and an example that causes the
problem is available on request. These two changes has made it perfectly reliable for me in version
4.0.4.5rc6-2 (debian package source version).
--
Edit Bug report at: http://bugs.php.net/?id=10400&edit=1