From:             ylke at netlabs dot hu
Operating system: Linux netlabs 2.4.26-grsec-2.0
PHP version:      4.3.8
PHP Bug Type:     Reproducible crash
Bug description:  include_once() && sprintf() bug

Description:
------------
include_once(sprintf("%s/modules/spec_%s/%s.php",$this->set[path],$name,$name));

if i run this row, one of the apache childers will exit with segmentation
fault.

if the line below doesnt contains the sprintf() then php wont segfault and
will write some parse warning in the specified file.

why do this?


Reproduce code:
---------------
include_once(sprintf("%s/modules/spec_%s/%s.php",$this->set[path],$name,$name));


Expected result:
----------------
segmentation fault


-- 
Edit bug report at http://bugs.php.net/?id=29448&edit=1
-- 
Try a CVS snapshot (php4):  http://bugs.php.net/fix.php?id=29448&r=trysnapshot4
Try a CVS snapshot (php5):  http://bugs.php.net/fix.php?id=29448&r=trysnapshot5
Fixed in CVS:               http://bugs.php.net/fix.php?id=29448&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=29448&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=29448&r=needtrace
Need Reproduce Script:      http://bugs.php.net/fix.php?id=29448&r=needscript
Try newer version:          http://bugs.php.net/fix.php?id=29448&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=29448&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=29448&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=29448&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=29448&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=29448&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=29448&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=29448&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=29448&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=29448&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=29448&r=float

Reply via email to