Package: php5-cli Version: 5.2.6-1 Severity: important When /usr/share/zoneinfo does not exist, this patch attempts to free() on unallocated memory, causing PHP to cease functioning. The problem comes from: 314 free(ents); Earlier, ents set via: 110 count = php_scandir(name, &ents, index_filter, php_alphasort);
Name is typically "/usr/share/zoneinfo". If the directory /usr/share/zoneinfo does not exist, ents is set to -1, but line 314 still attempts to free it, causing the problem. tzdata does not appear to be a requirement for php5, so there is no guarantee that this directory would exist. -- System Information: Debian Release: 4.0 APT prefers unstable APT policy: (990, 'unstable'), (500, 'testing'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.12.2 (SMP w/1 CPU core) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages php5-cli depends on: ii libbz2-1.0 1.0.5-0.1 high-quality block-sorting file co ii libc6 2.7-11 GNU C Library: Shared libraries ii libcomerr2 1.40.8-2 common error description library ii libdb4.6 4.6.21-8 Berkeley v4.6 Database Libraries [ ii libkrb53 1.6.dfsg.3-2 MIT Kerberos runtime libraries ii libmagic1 4.17-5etch3 File type determination library us ii libncurses5 5.6+20080503-1 Shared libraries for terminal hand ii libpcre3 7.6-2 Perl 5 Compatible Regular Expressi ii libssl0.9.8 0.9.8g-10 SSL shared libraries ii libxml2 2.6.32.dfsg-2 GNOME XML library ii mime-support 3.39-1 MIME files 'mime.types' & 'mailcap ii php5-common 5.2.6-1 Common files for packages built fr ii ucf 2.0020 Update Configuration File: preserv ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime php5-cli recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
