** Description changed: [Impact] - When certain code paths where an ErrorException should be raised, php - will enter an infinite loop, which could possibly lead to having the - process and a web server connection hanging. + When an ErrorException is raised on certain code paths, php will enter + an infinite loop, which could possibly lead to having the process and a + web server connection hanging. The proposed upload applies the upstream fix for the issue, as shown in https://bugs.php.net/bug.php?id=80781. [Test Plan] On a {hirsute,focal} environment, install php and use the script proposed at https://raw.githubusercontent.com/php/php- src/6dd85f83f78fbafc4a90b264e577a31b59323314/Zend/tests/bug80781.phpt to reproduce the bug; php will enter an infinite loop. Upgrade php to install the proposed fix and run the reproducer script again. Now, php will throw an error like PHP Fatal error: Uncaught ErrorException: Illegal offset type in isset or empty in $LOCATION_STR Stack trace: #0 $LOCATION_STR2: handle() #1 {main} - thrown in $LOCATION_STR3 - + thrown in $LOCATION_STR3 + Indicating the issue has been resolved. [Where problems could occur] The upstream patch was backported from php 8 to a newer patch version of php 7.4 than the ones being patched here (available in focal and hirsute). This could trigger uniexpected behaviors not experienced in upstream versions of php. Moreover, php build depends on several different packages. Some of these could have been changed since the last php build, which could also lead to unseen, unexpected behavior. [Other Info] - - This bug does not affect the versions of php available in impish and later. It also does not affect bionic. Therefore, SRUs are only needed for hirsute and focal. + + This bug does not affect the versions of php available in impish and + later. It also does not affect bionic. Therefore, SRUs are only needed + for hirsute and focal. [Original message] We are experiencing this reproducible crash with 7.4.3-4ubuntu2.7 https://bugs.php.net/bug.php?id=80781 This was fixed 9 months ago in upstream PHP 7.4.15. Can you apply the patch for #80781 and get it out in the next release of Ubuntu's PHP?
** Description changed: [Impact] When an ErrorException is raised on certain code paths, php will enter an infinite loop, which could possibly lead to having the process and a web server connection hanging. The proposed upload applies the upstream fix for the issue, as shown in https://bugs.php.net/bug.php?id=80781. [Test Plan] On a {hirsute,focal} environment, install php and use the script proposed at https://raw.githubusercontent.com/php/php- src/6dd85f83f78fbafc4a90b264e577a31b59323314/Zend/tests/bug80781.phpt to reproduce the bug; php will enter an infinite loop. Upgrade php to install the proposed fix and run the reproducer script again. Now, php will throw an error like PHP Fatal error: Uncaught ErrorException: Illegal offset type in isset or empty in $LOCATION_STR Stack trace: #0 $LOCATION_STR2: handle() #1 {main} thrown in $LOCATION_STR3 Indicating the issue has been resolved. [Where problems could occur] - The upstream patch was backported from php 8 to a newer patch version of - php 7.4 than the ones being patched here (available in focal and - hirsute). This could trigger uniexpected behaviors not experienced in - upstream versions of php. + The upstream patch was backported from php 8 to a newer patch version of php 7.4 than the ones being patched here (available in focal and hirsute). This could trigger uniexpected behaviors not experienced in upstream versions of php. The affected code isn't limited to a particular subfunction of PHP that we could point out, it could be triggered anytime + the slow fallback to the internal array handling is running (and the condition is to throw an exception while in that). Moreover, php build depends on several different packages. Some of these could have been changed since the last php build, which could also lead to unseen, unexpected behavior. [Other Info] This bug does not affect the versions of php available in impish and later. It also does not affect bionic. Therefore, SRUs are only needed for hirsute and focal. [Original message] We are experiencing this reproducible crash with 7.4.3-4ubuntu2.7 https://bugs.php.net/bug.php?id=80781 This was fixed 9 months ago in upstream PHP 7.4.15. Can you apply the patch for #80781 and get it out in the next release of Ubuntu's PHP? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1951031 Title: Patch php7.4.3-ubuntu with upstream's fix for upstream #80781 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/1951031/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
