Bug #1953: Certain messages cause php3's imap functions to crash.

From: online@olg.com Operating system: Linux 2.2.10 PHP version: 3.0.12 PHP Bug Type: Reproduceable crash Bug description: Certain messages cause php3's imap functions to crash. Certain messages cause php3 to crash when being accessed via imap. Both c-client 4.5 and 4.6.BETA from washington.edu compiled into php 3.0.12 produce the same result. Please email me at online@olg.com if you need a test account with the message that causes this crash. Here is a backtrace to help you audit and debug the code: (gdb) run -X -f /root/httpd/httpd.conf Starting program: /root/httpd/httpd.new -X -f /root/httpd/httpd.conf Program received signal SIGSEGV, Segmentation fault. 0x80820a7 in imap_add_body (arg=0xbfffe83c, body=0x826d7f0) at functions/imap.c:2170 2170 body=body->CONTENT_MSG_BODY; (gdb) backtrace #0 0x80820a7 in imap_add_body (arg=0xbfffe83c, body=0x826d7f0) at functions/imap.c:2170 #1 0x8081ffd in imap_add_body (arg=0x81947d8, body=0x826d700) at functions/imap.c:2161 #2 0x8082229 in php3_imap_fetchstructure (ht=0x8266688, return_value=0x81947d8, list=0x8196b20, plist=0x8196ae0) at functions/imap.c:2213#3 0x80a3954 in phpparse () at control_structures_inline.h:934 #4 0x8065b88 in php3_parse (yyin=0x81dee50) at main.c:1553 #5 0x8065d50 in apache_php3_module_main (r=0x81c6e64, fd=19, display_source_mode=0, preprocessed=0) at main.c:1934 #6 0x8063409 in send_php3 () #7 0x806346a in send_parsed_php3 () #8 0x80afed3 in ap_invoke_handler () #9 0x80c2c19 in process_request_internal () #10 0x80c2c7c in ap_process_request () #11 0x80baa0e in child_main () #12 0x80bab9c in make_child () #13 0x80bacf9 in startup_children () #14 0x80bb316 in standalone_main () #15 0x80bba83 in main () #16 0x400fbcb3 in __libc_start_main (main=0x80bb75c <main>, argc=4, argv=0xbffffd34, init=0x804b9ec <_init>, fini=0x811af7c <_fini>, rtld_fini=0x4000a350 <_dl_fini>, stack_end=0xbffffd2c) at ../sysdeps/generic/libc-start.c:78