PHP 4.0 Bug #2105: Crash in escapeshellcmd with an empty string
| From: | christophe dot massiot at mail dot dotcom dot fr | Date: | Wed, 18 Aug 1999 17:06:16 +0000 |
| Subject: | PHP 4.0 Bug #2105: Crash in escapeshellcmd with an empty string | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-9986@lists.php.net to get a copy of this message | ||
From: christophe.massiot@mail.dotcom.fr
Operating system: Linux 2.0.36/Debian slink
PHP version: 4.0 Latest CVS (18/08/1999)
PHP Bug Type: Reproduceable crash
Bug description: Crash in escapeshellcmd with an empty string
The following script :
<?
$toto = escapeshellcmd(substr("", 0, 38));
?>
crashes with the following backtrace :
Program received signal SIGSEGV, Segmentation fault.
0x808240b in _php3_escapeshellcmd (str=0x0) at exec.c:330
330 l = strlen(str);
(gdb) bt
#0 0x808240b in _php3_escapeshellcmd (str=0x0) at exec.c:330
#1 0x80824fb in php3_escapeshellcmd (ht=1, return_value=0xbffff788,
list=0x80d90e0, plist=0x80d910c, this_ptr=0x0) at exec.c:355
#2 0x807407d in execute (op_array=0x80ee508) at zend_execute.c:1403
#3 0x8056dcc in php_execute_script (primary_file=0xbffff948) at main.c:1133
#4 0x805c6a1 in main (argc=2, argv=0xbffff9b8) at cgi_main.c:448