From: j at korni dot net
Operating system: Linux64
PHP version: 5.2.8
PHP Bug Type: mbstring related
Bug description: crash following mb_detect_encoding
Description:
------------
mb_detect_encoding issues warning "Illegal argument", then things go
bezerk. Maybe some heap corruption.
Reproduce code:
---------------
<?php
$str = "\357\277\357\277\275\357\277\275\357\277\275\357\277\275";
$charset = mb_detect_encoding($str , "WINDOWS-1255,ASCII");
echo "detect $charset\n";
$str = mb_convert_encoding($str, "UTF-8", $charset);
echo "convert %str\n";
Expected result:
----------------
detect WINDOWS-1255
convert <some UTF8-text>
Actual result:
--------------
Warning: mb_detect_encoding(): Illegal argument in ...
detect detec *** note the corrupted string
Segmentation fault
#0 _zend_mm_alloc_int (heap=0xbbf2b0, size=6) at
/home/me/src/php-5.2.8/Zend/zend_alloc.c:1780
#1 0x000000000063f3e0 in _estrndup (s=0xd37e38 "UTF-8", length=6)
at /home/me/src/php-5.2.8/Zend/zend_alloc.c:2435
#2 0x00000000004ed164 in php_mb_parse_encoding_list (value=0xbbf2b0
"\001", value_length=6,
return_list=0x7fffdec7a400, return_size=0x7fffdec7a40c, persistent=0)
at /home/me/src/php-5.2.8/ext/mbstring/mbstring.c:367
#3 0x00000000004ee602 in php_mb_convert_encoding (input=<value optimized
out>,
length=<value optimized out>, _to_encoding=<value optimized out>,
_from_encodings=0xd37e38 "UTF-8",
output_len=0x7fffdec7a468) at
/home/me/src/php-5.2.8/ext/mbstring/mbstring.c:2443
#4 0x00000000004eeb44 in zif_mb_convert_encoding (ht=<value optimized
out>, return_value=0xd37dc0,
return_value_ptr=<value optimized out>, this_ptr=<value optimized
out>,
return_value_used=<value optimized out>) at
/home/me/src/php-5.2.8/ext/mbstring/mbstring.c:2553
#5 0x000000000068608b in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffdec7a6b0)
at /home/me/src/php-5.2.8/Zend/zend_vm_execute.h:200
#6 0x00000000006763f3 in execute (op_array=0xd37268)
at /home/me/src/php-5.2.8/Zend/zend_vm_execute.h:92
#7 0x0000000000658203 in zend_execute_scripts (type=8, retval=0x4,
file_count=3)
at /home/me/src/php-5.2.8/Zend/zend.c:1134
#8 0x00000000006184cb in php_execute_script
(primary_file=0x7fffdec7cd20)
at /home/me/src/php-5.2.8/main/main.c:2023
#9 0x00000000006d5a8c in main (argc=2, argv=0x7fffdec7cf18)
at /home/me/src/php-5.2.8/sapi/cli/php_cli.c:1133
--
Edit bug report at http://bugs.php.net/?id=47245&edit=1
--
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=47245&r=trysnapshot52
Try a CVS snapshot (PHP 5.3):
http://bugs.php.net/fix.php?id=47245&r=trysnapshot53
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=47245&r=trysnapshot60
Fixed in CVS:
http://bugs.php.net/fix.php?id=47245&r=fixedcvs
Fixed in CVS and need be documented:
http://bugs.php.net/fix.php?id=47245&r=needdocs
Fixed in release:
http://bugs.php.net/fix.php?id=47245&r=alreadyfixed
Need backtrace:
http://bugs.php.net/fix.php?id=47245&r=needtrace
Need Reproduce Script:
http://bugs.php.net/fix.php?id=47245&r=needscript
Try newer version:
http://bugs.php.net/fix.php?id=47245&r=oldversion
Not developer issue:
http://bugs.php.net/fix.php?id=47245&r=support
Expected behavior:
http://bugs.php.net/fix.php?id=47245&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=47245&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=47245&r=submittedtwice
register_globals:
http://bugs.php.net/fix.php?id=47245&r=globals
PHP 4 support discontinued: http://bugs.php.net/fix.php?id=47245&r=php4
Daylight Savings: http://bugs.php.net/fix.php?id=47245&r=dst
IIS Stability:
http://bugs.php.net/fix.php?id=47245&r=isapi
Install GNU Sed:
http://bugs.php.net/fix.php?id=47245&r=gnused
Floating point limitations:
http://bugs.php.net/fix.php?id=47245&r=float
No Zend Extensions:
http://bugs.php.net/fix.php?id=47245&r=nozend
MySQL Configuration Error:
http://bugs.php.net/fix.php?id=47245&r=mysqlcfg
