Re: Memory corruption bug
| From: | Johannes Schlüter | Date: | Sat, 27 Jun 2009 11:12:41 +0000 |
| Subject: | Re: Memory corruption bug | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-44517@lists.php.net to get a copy of this message | ||
On Fri, 2009-06-26 at 14:23 -0700, Andrei Zmievski wrote:
> I found what is effectively a memory corruption bug in all the branches. pecalloc() uses
> the wrong length to zero out the memory. Patch is attached, although I'm somewhat
> concerned about using just (nmemb*len) instead of something like safe_address(nmemb*len),
> but safe_address() is inlined in zend_alloc.c not in the header file.
>
> We should apply this to 5.2/5.3 before the release.
Agreed.
johanes