[Bug 617849] Re: php5 crashed with SIGSEGV in memcpy()

2010-08-15 Thread Vladimir Kolesnikov
** Package changed: php5 (Ubuntu) = php-imap (Ubuntu) -- php5 crashed with SIGSEGV in memcpy() https://bugs.launchpad.net/bugs/617849 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in ubuntu. -- Ubuntu-server-bugs mailing list

[Bug 617849] Re: php5 crashed with SIGSEGV in memcpy()

2010-08-14 Thread Vladimir Kolesnikov
** Attachment added: CoreDump.gz https://bugs.edge.launchpad.net/bugs/617849/+attachment/1489856/+files/CoreDump.gz ** Attachment added: Dependencies.txt https://bugs.edge.launchpad.net/bugs/617849/+attachment/1489857/+files/Dependencies.txt ** Attachment added: Disassembly.txt

[Bug 617849] Re: php5 crashed with SIGSEGV in memcpy()

2010-08-14 Thread Vladimir Kolesnikov
** Description changed: Binary package hint: php5 $ lsb_release -rd Description:Ubuntu 10.04.1 LTS Release:10.04 $ LC_ALL=C apt-cache policy php5 php5: - Installed: (none) - Candidate: 5.3.2-1ubuntu4.2 - Version table: - 5.3.2-1ubuntu4.2 0 - 500

[Bug 617849] Re: php5 crashed with SIGSEGV in memcpy()

2010-08-14 Thread Vladimir Kolesnikov
The problem seems to be either in php5-imap or libc-client2007e-dev. Due to a bug, my script passes invalid $section value to imap_fetchbody(), something like: imap_fetchbody($imap_handle, $message_number,

[Bug 617849] Re: php5 crashed with SIGSEGV in memcpy()

2010-08-14 Thread Vladimir Kolesnikov
I have added printf(body=%p, len=%ld\n, body, len); before RETVAL_STRINGL(body, len, 1); and got very interesting results: body=0x7ff23a0d8f4e, len=0 3.1 ... body=0x7ff23a0d8f4e, len=0

[Bug 617849] Re: php5 crashed with SIGSEGV in memcpy()

2010-08-14 Thread Vladimir Kolesnikov
Finally got it. The problem is that mail_fetch_body() function from uw-imap- 2007e~dfsg/src/c-client/mail.c can return an empty string without setting len to zero: if (!(section *section))-/* top-level text wanted? */ return mail_fetch_message (stream,msgno,len,flags);

[Bug 617849] Re: php5 crashed with SIGSEGV in memcpy()

2010-08-14 Thread Vladimir Kolesnikov
Quick fix — explicilty set len to zero before passing it to mail_fetchbody_full() ** Patch added: php_imap.c.diff https://bugs.edge.launchpad.net/ubuntu/+source/php5/+bug/617849/+attachment/1489934/+files/php_imap.c.diff -- php5 crashed with SIGSEGV in memcpy()

[Bug 617849] Re: php5 crashed with SIGSEGV in memcpy()

2010-08-14 Thread Vladimir Kolesnikov
See also Bug #617876 -- php5 crashed with SIGSEGV in memcpy() https://bugs.launchpad.net/bugs/617849 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com

[Bug 617849] Re: php5 crashed with SIGSEGV in memcpy()

2010-08-14 Thread Brian Murray
** Tags added: patch -- php5 crashed with SIGSEGV in memcpy() https://bugs.launchpad.net/bugs/617849 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com