Re: Memory corruption bug
| From: | Pierre Joye | Date: | Sun, 28 Jun 2009 10:10:44 +0000 |
| Subject: | Re: Memory corruption bug | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-44527@lists.php.net to get a copy of this message | ||
committed.
2009/6/27 Johannes Schlüter <johannes@php.net>:
> On Fri, 2009-06-26 at 14:23 -0700, Andrei Zmievski wrote:
>> I found what is effectively a memory corruption bug in all the branches. pecalloc() uses
>> the wrong length to zero out the memory. Patch is attached, although I'm somewhat
>> concerned about using just (nmemb*len) instead of something like safe_address(nmemb*len),
>> but safe_address() is inlined in zend_alloc.c not in the header file.
>>
>> We should apply this to 5.2/5.3 before the release.
>
> Agreed.
>
> johanes
>
>
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
--
Pierre
http://blog.thepimp.net | http://www.libgd.org