Re: [ZEND-ENGINE-CVS] cvs: ZendEngine2 /tests bug24773.phpt
| From: | Andi Gutmans | Date: | Thu, 04 Dec 2003 07:46:10 +0000 |
| Subject: | Re: [ZEND-ENGINE-CVS] cvs: ZendEngine2 /tests bug24773.phpt | ||
| References: | 1 2 3 4 | Groups: | php.zend-engine.cvs |
| Request: | Send a blank email to php-zend-engine-cvs+get-2065@lists.php.net to get a copy of this message | ||
I think the right fix is to check for &EG(uninitialized_zval_ptr). If this is the case, then you know something was illegal and it should cover all cases (strings, integers).
Either try that or wait until I try on Monday (going away for a weekend now).
In any case, the current patch should probably be reverted.
Andi
At 10:34 PM 12/3/2003 -0500, Ilia Alshanetsky wrote:
On December 3, 2003 10:20 pm, Moriyoshi Koizumi wrote: How does it cause a memory corruption in the special event like the following? I don't think so...php -r ' $a=1; unset($a["abc"]["gfe"]["dd"]); 'Moriyoshi Relevant valgrind output using the script above from ZE2. ==29088== Conditional jump or move depends on uninitialised value(s)==29088== at 0x83AF758: zend_fetch_dim_unset_handler (zend_execute.c:1949) ==29088== by 0x838D2CD: execute (zend_execute.c:1273) ==29088== by 0x8359453: zend_eval_string (zend_execute_API.c:856) ==29088== by 0x8359635: zend_eval_string_ex (zend_execute_API.c:894)Ilia -- Zend Engine CVS Mailing List (http://cvs.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php