Re: [ZEND-ENGINE-CVS] cvs: ZendEngine2 /tests bug24773.phpt

From: Date: Thu, 04 Dec 2003 03:20:05 +0000
Subject: Re: [ZEND-ENGINE-CVS] cvs: ZendEngine2 /tests bug24773.phpt
References: 1 2  Groups: php.zend-engine.cvs 
Request: Send a blank email to php-zend-engine-cvs+get-2061@lists.php.net to get a copy of this message
On 2003/12/04, at 9:19, Ilia Alshanetsky wrote:
It actually should say non-arrays rather then integers, I'll fix it shortly. The patch that was applied however is wrong, in the event $a is not a string the == IS_STRING_OFFSET (in zend_execute.c line 1949 (Ze2) and 1313 (Ze1)) uses an un-initialized value, which could result in a crash or memory corruption.
How does it cause a memory corruption in the special event like the following? I don't think so...
php -r ' $a=1; unset($a["abc"]["gfe"]["dd"]); '
Moriyoshi

« previous php.zend-engine.cvs (#2061) next »