Re: [PHP-DEV] segfault on adding empty heredoc to string

2002-09-01 Thread derick

Hey,

I can reproduce this crash:

Program received signal SIGSEGV, Segmentation fault.
0x081f8ddf in _zval_dtor (zvalue=0xbfffd3f0, __zend_filename=0x8272220 
/dat/dev/php/php-4.3.0dev/Zend/zend_operators.c, 
__zend_lineno=1057) at 
/dat/dev/php/php-4.3.0dev/Zend/zend_variables.c:43
43  CHECK_ZVAL_STRING_REL(zvalue);
(gdb) bt
#0  0x081f8ddf in _zval_dtor (zvalue=0xbfffd3f0, 
__zend_filename=0x8272220 
/dat/dev/php/php-4.3.0dev/Zend/zend_operators.c, 
__zend_lineno=1057) at 
/dat/dev/php/php-4.3.0dev/Zend/zend_variables.c:43
#1  0x081f6ccd in concat_function (result=0x8328f9c, op1=0x8328f9c, 
op2=0xbfffd3f0) at /dat/dev/php/php-4.3.0dev/Zend/zend_operators.c:1057
#2  0x08207d4c in execute (op_array=0x8324ab4) at 
/dat/dev/php/php-4.3.0dev/Zend/zend_execute.c:1174
#3  0x40019bcc in xdebug_execute () from 
/dat/dev/php/xdebug/modules/xdebug.so
#4  0x081fa67e in zend_execute_scripts (type=8, retval=0x0, 
file_count=3) at /dat/dev/php/php-4.3.0dev/Zend/zend.c:813
#5  0x081cc4ea in php_execute_script (primary_file=0xb920) at 
/dat/dev/php/php-4.3.0dev/main/main.c:1524
#6  0x08214164 in main (argc=1, argv=0xb9c4) at 
/dat/dev/php/php-4.3.0dev/sapi/cli/php_cli.c:683
#7  0x40520306 in __libc_start_main (main=0x82138bc main, argc=1, 
ubp_av=0xb9c4, init=0x8078b84 _init, fini=0x8214820 _fini, 
rtld_fini=0x4000d2dc _dl_fini, stack_end=0xb9bc) at 
../sysdeps/generic/libc-start.c:129


Derick

On Sun, 1 Sep 2002, Lukas Schroeder wrote:

 hi,
 
 i can crash my php here by using these lines:
 
 ?php 
 
 $a = '';
 $a .= EOF
 EOF;
 
 ?
 
 can anyone second this?
 
 
 regards,
   -lukas
 
 
 #0  0x403218b5 in _zval_dtor (zvalue=0xbfffe214, __zend_filename=0x4038dc80
 /home/azzit/src/cvs/php4/php4/Zend/zend_operators.c, __zend_lineno=1057)
 at /home/azzit/src/cvs/php4/php4/Zend/zend_variables.c:43
 #1  0x4031f15f in concat_function (result=0x8296a0c, op1=0x8296a0c, 
 op2=0xbfffe214) at /home/azzit/src/cvs/php4/php4/Zend/zend_operators.c:1057
 #2  0x40333fc0 in execute (op_array=0x829674c)
 at /home/azzit/src/cvs/php4/php4/Zend/zend_execute.c:1165
 #3  0x403239e4 in zend_execute_scripts (type=8, retval=0x0, file_count=3)
 at /home/azzit/src/cvs/php4/php4/Zend/zend.c:810
 
 
 -- 
 PHP Development Mailing List http://www.php.net/
 To unsubscribe, visit: http://www.php.net/unsub.php
 

---
 Did I help you?   http://www.derickrethans.nl/link.php?url=giftlist
 Frequent ranting: http://www.derickrethans.nl/
---
 PHP: Scripting the Web - [EMAIL PROTECTED]
All your branches are belong to me!
SRM: Script Running Machine - www.vl-srm.net
---


-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP-DEV] segfault on adding empty heredoc to string

2002-09-01 Thread Andrey Hristov

No problems on win32 , php-430-dev cli.ZE2.

Best regards
Andrey Hristov


- Original Message -
From: Lukas Schroeder [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, September 01, 2002 8:50 PM
Subject: [PHP-DEV] segfault on adding empty heredoc to string


 hi,

 i can crash my php here by using these lines:

 ?php

 $a = '';
 $a .= EOF
 EOF;

 ?

 can anyone second this?


 regards,
   -lukas


 #0  0x403218b5 in _zval_dtor (zvalue=0xbfffe214,
__zend_filename=0x4038dc80
 /home/azzit/src/cvs/php4/php4/Zend/zend_operators.c,
__zend_lineno=1057)
 at /home/azzit/src/cvs/php4/php4/Zend/zend_variables.c:43
 #1  0x4031f15f in concat_function (result=0x8296a0c, op1=0x8296a0c,
 op2=0xbfffe214) at
/home/azzit/src/cvs/php4/php4/Zend/zend_operators.c:1057
 #2  0x40333fc0 in execute (op_array=0x829674c)
 at /home/azzit/src/cvs/php4/php4/Zend/zend_execute.c:1165
 #3  0x403239e4 in zend_execute_scripts (type=8, retval=0x0, file_count=3)
 at /home/azzit/src/cvs/php4/php4/Zend/zend.c:810


 --
 PHP Development Mailing List http://www.php.net/
 To unsubscribe, visit: http://www.php.net/unsub.php



-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, visit: http://www.php.net/unsub.php




RE: [PHP-DEV] segfault on adding empty heredoc to string

2002-09-01 Thread Mike Robinson

No problems with 4.2.2 as apache-1.3.26 dso on RH-7.2

Regards
Mike Robinson


-Original Message-
From: Lukas Schroeder [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, September 01, 2002 1:50 PM
To: [EMAIL PROTECTED]
Subject: [PHP-DEV] segfault on adding empty heredoc to string


hi,

i can crash my php here by using these lines:

?php 

$a = '';
$a .= EOF
EOF;

?

can anyone second this?


regards,
  -lukas


#0  0x403218b5 in _zval_dtor (zvalue=0xbfffe214,
__zend_filename=0x4038dc80
/home/azzit/src/cvs/php4/php4/Zend/zend_operators.c,
__zend_lineno=1057)
at /home/azzit/src/cvs/php4/php4/Zend/zend_variables.c:43
#1  0x4031f15f in concat_function (result=0x8296a0c, op1=0x8296a0c, 
op2=0xbfffe214) at
/home/azzit/src/cvs/php4/php4/Zend/zend_operators.c:1057
#2  0x40333fc0 in execute (op_array=0x829674c)
at /home/azzit/src/cvs/php4/php4/Zend/zend_execute.c:1165
#3  0x403239e4 in zend_execute_scripts (type=8, retval=0x0,
file_count=3)
at /home/azzit/src/cvs/php4/php4/Zend/zend.c:810


-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP-DEV] segfault on adding empty heredoc to string

2002-09-01 Thread Timm Friebe

On Sun, 2002-09-01 at 19:50, Lukas Schroeder wrote:
 hi,
 
 i can crash my php here by using these lines:

Nope, works fine:
---
thekid@friebes:~  cat | php -q
?php 
$a = '';
$a .= EOF
EOF;
   
?
thekid@friebes:~  php -v 
4.2.1
thekid@friebes:~  uname -a
FreeBSD friebes.net 4.6-STABLE FreeBSD 4.6-STABLE #4: Mon Aug 26
23:06:34 CEST 2002 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC 
i386
---
friebe@php3:~  cat | php -q
?php 
$a = '';
$a .= EOF
EOF;   
?
friebe@php3:~  php -v 
4.2.1
friebe@php3:~  uname -a
Linux php3.de 2.4.18 #1 Sat Apr 20 16:15:17 CEST 2002 i686 unknown
(SuSE 7.2)
---
cgi@heuer1:~  cat | php4 -q
?php 
$a = '';
$a .= EOF
EOF;
?
cgi@heuer1:~  php4 -v
4.1.2
cgi@heuer1:~  uname -a
Linux heuer1 2.2.20 #1 SMP Mon Nov 5 14:36:30 CET 2001 i686 unknown
(Debian)
---

-- 
Timm


-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP-DEV] segfault on adding empty heredoc to string

2002-09-01 Thread Jani Taskinen

  
Crashes with latest CVS HEAD here too:

0x828b505 in _zval_dtor (zvalue=0xbfffd540, __zend_filename=0x8376000 
/usr/src/web/php/php4/Zend/zend_operators.c, 
__zend_lineno=1057) at /usr/src/web/php/php4/Zend/zend_variables.c:43
43  CHECK_ZVAL_STRING_REL(zvalue);
(gdb) bt
#0  0x828b505 in _zval_dtor (zvalue=0xbfffd540, 
__zend_filename=0x8376000 /usr/src/web/php/php4/Zend/zend_operators.c, 
__zend_lineno=1057)
at /usr/src/web/php/php4/Zend/zend_variables.c:43
#1  0x8288e23 in concat_function (result=0x84fc4cc, op1=0x84fc4cc, op2=0xbfffd540)
at /usr/src/web/php/php4/Zend/zend_operators.c:1057
#2  0x829d9f0 in execute (op_array=0x84fcd74) at 
/usr/src/web/php/php4/Zend/zend_execute.c:1174
#3  0x828d564 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at 
/usr/src/web/php/php4/Zend/zend.c:814
#4  0x82541e1 in php_execute_script (primary_file=0xb95c) at 
/usr/src/web/php/php4/main/main.c:1524
#5  0x82a69b7 in main (argc=2, argv=0xb9c4) at 
/usr/src/web/php/php4/sapi/cli/php_cli.c:683
#6  0x410e39cb in __libc_start_main (main=0x82a5dfc main, argc=2, argv=0xb9c4, 
init=0x8088bb8 _init, 
fini=0x831c8b4 _fini, rtld_fini=0x4000aea0 _dl_fini, stack_end=0xb9bc)
at ../sysdeps/generic/libc-start.c:92


p.s. There are dozens of bugs like this in the bug database too..
 iirc, this one is also reported there too. Feel free to submit
 patch to fix this, nobody looks in the Scripting Engine.. category,
 so I won't expect these to be fixed really soon.


-- 

On Sun, 1 Sep 2002, Lukas Schroeder wrote:

hi,

i can crash my php here by using these lines:

?php 

$a = '';
$a .= EOF
EOF;

?

can anyone second this?


regards,
  -lukas


#0  0x403218b5 in _zval_dtor (zvalue=0xbfffe214, __zend_filename=0x4038dc80
/home/azzit/src/cvs/php4/php4/Zend/zend_operators.c, __zend_lineno=1057)
at /home/azzit/src/cvs/php4/php4/Zend/zend_variables.c:43
#1  0x4031f15f in concat_function (result=0x8296a0c, op1=0x8296a0c, 
op2=0xbfffe214) at /home/azzit/src/cvs/php4/php4/Zend/zend_operators.c:1057
#2  0x40333fc0 in execute (op_array=0x829674c)
at /home/azzit/src/cvs/php4/php4/Zend/zend_execute.c:1165
#3  0x403239e4 in zend_execute_scripts (type=8, retval=0x0, file_count=3)
at /home/azzit/src/cvs/php4/php4/Zend/zend.c:810





-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP-DEV] segfault on adding empty heredoc to string

2002-09-01 Thread Zeev Suraski

Mark them as critical and they'll get some attention :)

Is this bug new to the latest CVS or does it occur with 4.2?
At 01:10 02/09/2002, Jani Taskinen wrote:

 Crashes with latest CVS HEAD here too:

0x828b505 in _zval_dtor (zvalue=0xbfffd540, __zend_filename=0x8376000 
/usr/src/web/php/php4/Zend/zend_operators.c,
 __zend_lineno=1057) at /usr/src/web/php/php4/Zend/zend_variables.c:43
43  CHECK_ZVAL_STRING_REL(zvalue);
(gdb) bt
#0  0x828b505 in _zval_dtor (zvalue=0xbfffd540,
 __zend_filename=0x8376000 
 /usr/src/web/php/php4/Zend/zend_operators.c, __zend_lineno=1057)
 at /usr/src/web/php/php4/Zend/zend_variables.c:43
#1  0x8288e23 in concat_function (result=0x84fc4cc, op1=0x84fc4cc, 
op2=0xbfffd540)
 at /usr/src/web/php/php4/Zend/zend_operators.c:1057
#2  0x829d9f0 in execute (op_array=0x84fcd74) at 
/usr/src/web/php/php4/Zend/zend_execute.c:1174
#3  0x828d564 in zend_execute_scripts (type=8, retval=0x0, file_count=3) 
at /usr/src/web/php/php4/Zend/zend.c:814
#4  0x82541e1 in php_execute_script (primary_file=0xb95c) at 
/usr/src/web/php/php4/main/main.c:1524
#5  0x82a69b7 in main (argc=2, argv=0xb9c4) at 
/usr/src/web/php/php4/sapi/cli/php_cli.c:683
#6  0x410e39cb in __libc_start_main (main=0x82a5dfc main, argc=2, 
argv=0xb9c4, init=0x8088bb8 _init,
 fini=0x831c8b4 _fini, rtld_fini=0x4000aea0 _dl_fini, 
 stack_end=0xb9bc)
 at ../sysdeps/generic/libc-start.c:92


 p.s. There are dozens of bugs like this in the bug database too..
  iirc, this one is also reported there too. Feel free to submit
  patch to fix this, nobody looks in the Scripting Engine.. 
 category,
  so I won't expect these to be fixed really soon.


--

On Sun, 1 Sep 2002, Lukas Schroeder wrote:

 hi,
 
 i can crash my php here by using these lines:
 
 ?php
 
 $a = '';
 $a .= EOF
 EOF;
 
 ?
 
 can anyone second this?
 
 
 regards,
   -lukas
 
 
 #0  0x403218b5 in _zval_dtor (zvalue=0xbfffe214, __zend_filename=0x4038dc80
 /home/azzit/src/cvs/php4/php4/Zend/zend_operators.c, 
 __zend_lineno=1057)
 at /home/azzit/src/cvs/php4/php4/Zend/zend_variables.c:43
 #1  0x4031f15f in concat_function (result=0x8296a0c, op1=0x8296a0c,
 op2=0xbfffe214) at 
 /home/azzit/src/cvs/php4/php4/Zend/zend_operators.c:1057
 #2  0x40333fc0 in execute (op_array=0x829674c)
 at /home/azzit/src/cvs/php4/php4/Zend/zend_execute.c:1165
 #3  0x403239e4 in zend_execute_scripts (type=8, retval=0x0, file_count=3)
 at /home/azzit/src/cvs/php4/php4/Zend/zend.c:810
 
 
 


--
PHP Development Mailing List http://www.php.net/
To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, visit: http://www.php.net/unsub.php