ABR: Array bounds read in ZTS mode + explanation.

From: Date: Mon, 27 Dec 1999 11:36:23 +0000
Subject: ABR: Array bounds read in ZTS mode + explanation.
Groups: php.version4 
Request: Send a blank email to php-version4+get-8531@lists.php.net to get a copy of this message
**** Purify instrumented bin/nsd (pid 22145) **** ABR: Array bounds read (9440 times): * This is occurring while in thread 10: memcpy [rtlib.o] zend_hash_copy [zend_hash.c:861] compiler_globals_ctor [zend.c:247] allocate_new_resource [TSRM.c:200] ts_resource [TSRM.c:235] php_ns_request_handler [aolserver.c:500] * Reading 60 bytes from 0x264ec8 in the heap (44 bytes at 0x264ed8 illegal). * Address 0x264ec8 is at the beginning of a malloc'd block of 16 bytes. * This block was allocated from: malloc [rtlib.o] zend_hash_add_or_update [zend_hash.c:189] zend_register_functions [zend_API.c:698] zend_startup_builtin_functions [zend_builtin_functions.c:78] zend_startup [zend.c:363] problem is : zend_API.c line 698 if (zend_hash_add(target_function_table, ptr->fname, strlen(ptr->fname)+1, &internal_function, sizeof(zend_internal_function), NULL) == FAILURE) { unload=1; break; } zend.c line 238: zend_hash_copy(compiler_globals->function_table, global_function_table, NULL, &tmp_func, sizeof(zend_function)); but: sizeof(zend_function) > sizeof(zend_internal_function) so we're coying uninted memory (as purify tells us) in compiler_globals_ctor(). tc

« previous php.version4 (#8531) next »