Debian Bug report logs - #524409
php5: PCRE bug causes PHP to segfault

version graph

Package: php5; Maintainer for php5 is Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>; Source for php5 is src:php5.

Reported by: Ray <ray@discountofficeitems.com>

Date: Thu, 16 Apr 2009 22:00:01 UTC

Severity: normal

Found in versions php5/5.2.0-8+etch13, php5/5.2.9.dfsg.1-4

Fixed in version 5.2.6.dfsg.1-1+lenny4

Done: Ondřej Surý <ondrej@sury.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#524409; Package php5. (Thu, 16 Apr 2009 22:00:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Ray <ray@discountofficeitems.com>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Thu, 16 Apr 2009 22:00:04 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Ray <ray@discountofficeitems.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: php5: PCRE bug causes PHP to segfault
Date: Thu, 16 Apr 2009 16:45:31 -0500
Package: php5
Version: 5.2.0-8+etch13
Severity: normal

code that triggers the error, dug up from inside the zend framework
<?php

$q  = '\'';
$qe = '\\\\\'';
preg_replace("/$q($qe|\\\\{2}|[^$q])*$q/", '', str_pad('\'',6000, 'a'));

echo 'Success', PHP_EOL;

?>

output:
Segmentation fault

expected output:
Success

phpinfo() puts the pcre library at: 6.7.7.4 2008-07-04

It may be related to: http://bugs.exim.org/show_bug.cgi?id=809

-- System Information:
Debian Release: 4.0
  APT prefers oldstable
  APT policy: (500, 'oldstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.24-etchnhalf.1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages php5 depends on:
ii  libapache2-mod-php5       5.2.0-8+etch13 server-side, HTML-embedded 
scripti
ii  php5-common               5.2.0-8+etch13 Common files for packages 
built fr

php5 recommends no packages.

-- no debconf information




Bug marked as found in version 5.2.9.dfsg.1-4. Request was from Raphael Geissert <geissert@debian.org> to control@bugs.debian.org. (Thu, 09 Jul 2009 03:03:03 GMT) Full text and rfc822 format available.

Bug 524409 cloned as bug 536317. Request was from Raphael Geissert <geissert@debian.org> to control@bugs.debian.org. (Thu, 09 Jul 2009 03:03:04 GMT) Full text and rfc822 format available.

Blocking bugs of 524409 added: 536317 Request was from Raphael Geissert <geissert@debian.org> to control@bugs.debian.org. (Thu, 09 Jul 2009 03:03:07 GMT) Full text and rfc822 format available.

Reply sent to Ondřej Surý <ondrej@sury.org>:
You have taken responsibility. (Fri, 08 Jan 2010 16:51:06 GMT) Full text and rfc822 format available.

Notification sent to Ray <ray@discountofficeitems.com>:
Bug acknowledged by developer. (Fri, 08 Jan 2010 16:51:06 GMT) Full text and rfc822 format available.

Message #16 received at 524409-done@bugs.debian.org (full text, mbox):

From: Ondřej Surý <ondrej@sury.org>
To: 524409-done@bugs.debian.org
Subject: #524409: php5: PCRE bug causes PHP to segfault
Date: Fri, 8 Jan 2010 17:45:07 +0100
Version: 5.2.6.dfsg.1-1+lenny4

root@howl:/tmp# php test.php
Success


-- 
Ondřej Surý <ondrej@sury.org>
http://blog.rfc1925.org/




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 09 Feb 2010 07:27:56 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Mon Apr 21 07:55:53 2014; Machine Name: beach.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.