PHP :: Bug #66872 :: Crash when passing string to gmp

Bug #66872	Crash when passing string to gmp_testbit
Submitted:	2014-03-09 20:22 UTC	Modified:	2014-03-10 12:11 UTC
From:	contact at dimitrifourny dot com	Assigned:	nikic (profile)
Status:	Closed	Package:	Reproducible crash
PHP Version:	5.6.0alpha3	OS:	Windows7 x64
Private report:	No	CVE-ID:	None

View Developer Edit

[2014-03-09 20:22 UTC] contact at dimitrifourny dot com

Description:
------------
Hello!

I have found a possible security issues.
Can you fix it to make a more stable PHP version please?

Thank you for your good job!

Test script:
---------------
<?php
    gmp_testbit(str_repeat("A", 2000), 1);
?>

Actual result:
--------------
A nice crash on Windows 7 x64.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

[2014-03-10 11:20 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 11:20 UTC] pajoye@php.net

-Status: Open +Status: Closed

[2014-03-10 11:20 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 11:45 UTC] ab@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 11:45 UTC] ab@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 12:11 UTC] nikic@php.net

-Summary: A reproductible crash in PHP 5.6 (5.6.0alpha3) +Summary: Crash when passing string to gmp_testbit -Assigned To: +Assigned To: nikic

[2014-03-10 15:29 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:29 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:30 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:30 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:31 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:31 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-11 08:36 UTC] ab@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-11 08:36 UTC] ab@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-04-10 04:47 UTC] tyrael@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-04-10 04:47 UTC] tyrael@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-10-07 23:15 UTC] stas@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-10-07 23:15 UTC] stas@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-10-07 23:27 UTC] stas@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-10-07 23:27 UTC] stas@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2025 The PHP Group All rights reserved.	Last updated: Sat Nov 01 04:00:02 2025 UTC