Re: [ZEND-ENGINE-CVS] cvs: ZendEngine2 /tests bug24773.phpt

From: Date: Thu, 04 Dec 2003 07:46:10 +0000
Subject: Re: [ZEND-ENGINE-CVS] cvs: ZendEngine2 /tests bug24773.phpt
References: 1 2 3 4  Groups: php.zend-engine.cvs 
Request: Send a blank email to php-zend-engine-cvs+get-2065@lists.php.net to get a copy of this message
I think the right fix is to check for &EG(uninitialized_zval_ptr). If this is the case, then you know something was illegal and it should cover all cases (strings, integers). Either try that or wait until I try on Monday (going away for a weekend now). In any case, the current patch should probably be reverted. Andi At 10:34 PM 12/3/2003 -0500, Ilia Alshanetsky wrote:
On December 3, 2003 10:20 pm, Moriyoshi Koizumi wrote: How does it cause a memory corruption in the special event like the following? I don't think so...
php -r ' $a=1; unset($a["abc"]["gfe"]["dd"]); '
Moriyoshi Relevant valgrind output using the script above from ZE2. ==29088== Conditional jump or move depends on uninitialised value(s)
==29088==    at 0x83AF758: zend_fetch_dim_unset_handler (zend_execute.c:1949)
==29088==    by 0x838D2CD: execute (zend_execute.c:1273)
==29088==    by 0x8359453: zend_eval_string (zend_execute_API.c:856)
==29088==    by 0x8359635: zend_eval_string_ex (zend_execute_API.c:894)
Ilia -- Zend Engine CVS Mailing List (http://cvs.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php


« previous php.zend-engine.cvs (#2065) next »