php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #26208 phpmyadmin-2.5.4 + mysql-4.0.15 = crash
Submitted: 2003-11-11 15:40 UTC Modified: 2004-01-05 08:07 UTC
From: temnota at kmv dot ru Assigned:
Status: Closed Package: MySQL related
PHP Version: 4.3.4 OS: Linux RH7.3
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: temnota at kmv dot ru
New email:
PHP Version: OS:

 

 [2003-11-11 15:40 UTC] temnota at kmv dot ru 
Description:
------------
When i try to browse mysql table structure in phpmyadmin
it crash.
php crash into Zend/zend_API.c:add_property_string_ex
but incorrect parametrs coming from mysql module.
mysql compilled as shared module

Actual result:
--------------
#0  0x401cfe27 in strlen () from /lib/libc.so.6
#1  0x404757b6 in add_property_string_ex (arg=0x848a6ac, key=0x40858409 "def",
    key_len=4, str=0x9 <Address 0x9 out of bounds>, duplicate=1)
    at /usr/src/redhat/BUILD/php-4.3.4/Zend/zend_API.c:980
#2  0x40856b1a in zif_mysql_fetch_field (ht=1, return_value=0x848a6ac,
    this_ptr=0x0, return_value_used=1)
    at /usr/src/redhat/BUILD/php-4.3.4/ext/mysql/php_mysql.c:2163
#3  0x40488463 in execute (op_array=0x8357b78)
    at /usr/src/redhat/BUILD/php-4.3.4/Zend/zend_execute.c:1616
#4  0x4048863f in execute (op_array=0x82bdd5c)
    at /usr/src/redhat/BUILD/php-4.3.4/Zend/zend_execute.c:1660
#5  0x4047308c in zend_execute_scripts (type=8, retval=0x0, file_count=3)
    at /usr/src/redhat/BUILD/php-4.3.4/Zend/zend.c:884
#6  0x40445871 in php_execute_script (primary_file=0xbffff470)
    at /usr/src/redhat/BUILD/php-4.3.4/main/main.c:1729
#7  0x4049043e in apache_php_module_main (r=0x8139e5c, display_source_mode=0)
    at /usr/src/redhat/BUILD/php-4.3.4/sapi/apache/sapi_apache.c:54
#8  0x40491173 in send_php (r=0x8139e5c, display_source_mode=0, filename=0x0)
    at /usr/src/redhat/BUILD/php-4.3.4/sapi/apache/mod_php4.c:620
#9  0x404911d3 in send_parsed_php (r=0x8139e5c)
    at /usr/src/redhat/BUILD/php-4.3.4/sapi/apache/mod_php4.c:635
#10 0x0805ce63 in ap_invoke_handler ()
#11 0x08073ea7 in process_request_internal ()
#12 0x08073f08 in ap_process_request ()
#13 0x080695c1 in child_main ()
#14 0x08069790 in make_child ()
#15 0x08069904 in startup_children ()
#16 0x08069ff4 in standalone_main ()
#17 0x0806a873 in main ()
#18 0x4016d1c4 in __libc_start_main () from /lib/libc.so.6

and other backtrace
Breakpoint 2, add_property_string_ex (arg=0x848a6bc, key=0x40894a53 "def",
    key_len=4, str=0xb <Address 0xb out of bounds>, duplicate=1)
    at /usr/src/redhat/BUILD/php-4.3.4/Zend/zend_API.c:977
977             MAKE_STD_ZVAL(tmp);
(gdb) bt
#0  add_property_string_ex (arg=0x848a6bc, key=0x40894a53 "def", key_len=4,
    str=0xb <Address 0xb out of bounds>, duplicate=1)
    at /usr/src/redhat/BUILD/php-4.3.4/Zend/zend_API.c:977
#1  0x40892f2c in zif_mysql_fetch_field (ht=1, return_value=0x848a6bc,
    this_ptr=0x0, return_value_used=1)
    at /usr/src/redhat/BUILD/php-4.3.4/ext/mysql/php_mysql.c:2163
#2  0x404bf51f in execute (op_array=0x8357b78)
    at /usr/src/redhat/BUILD/php-4.3.4/Zend/zend_execute.c:1616
[skipp]
(gdb) return
Make add_property_string_ex return now? (y or n) y

#0  0x40892f2c in zif_mysql_fetch_field (ht=1, return_value=0x848a6bc,
    this_ptr=0x0, return_value_used=1)
    at /usr/src/redhat/BUILD/php-4.3.4/ext/mysql/php_mysql.c:2163
2163            add_property_string(return_value, "def",(mysql_field->def?mysql_field->def:empty_string), 1);

(gdb) print mysql_field[0]
$2 = {name = 0x8451750 "idp", table = 0x8451748 "bufer", org_table = 0x0,
  db = 0x3 <Address 0x3 out of bounds>, def = 0xb <Address 0xb out of bounds>,
  length = 7, max_length = 49667, flags = 0, decimals = 138745696,
  type = 138745688}
(gdb) cont

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2003-11-29 15:58 UTC] georg@php.net 
Which version of client library do you use?
 [2003-12-04 02:27 UTC] sniper@php.net 
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.
 [2004-01-05 06:56 UTC] temnota at kmv dot ru 
Shared,  libmysqlclient.so.12.0.0
 [2004-01-05 08:07 UTC] georg@php.net 
This problem is fixed with actual MySQL Version  
4.0.17. You also have to compile PHP with 4.0.17 client  
libraries, not with bundled libmysql.  
  
If this will not work please reopen this bug.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Fri Dec 27 18:01:30 2024 UTC