ID: 26753
User updated by: Markus dot Lidel at shadowconnect dot com
Reported By: Markus dot Lidel at shadowconnect dot com
Status: Open
Bug Type: Reproducible crash
Operating System: Linux
PHP Version: Irrelevant
New Comment:
BTW, found the bug in php4-200312311230 and in php5-200312311230.
Previous Comments:
------------------------------------------------------------------------
[2003-12-31 08:07:45] Markus dot Lidel at shadowconnect dot com
Description:
------------
If you use the zend_fetch_list_dtor_id function, and you have for
example loaded the "crack" extension (which registers a destructor
using the function register_list_destructors()), php crashes. The
source of the problem is this line:
if (strcmp(type_name, lde->type_name) == 0) {
The register_list_destructors() set lde->type_name to NULL. If you
replace the code with
if (lde->type_name && (strcmp(type_name, lde->type_name) == 0)) {
the function works fine.
Reproduce code:
---------------
int id = zend_fetch_list_dtor_id function("foo");
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=26753&edit=1
