php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #36363 php gets segv in _php_stream_read/memcpy
Submitted: 2006-02-11 00:25 UTC Modified: 2006-02-19 01:00 UTC
Votes:1
Avg. Score:4.0 ± 0.0
Reproduced:0 of 1 (0.0%)
From: holgerk44 at freenet dot de Assigned:
Status: No Feedback Package: Reproducible crash
PHP Version: 5.1.2 OS: RHEL 4
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: holgerk44 at freenet dot de
New email:
PHP Version: OS:

 

 [2006-02-11 00:25 UTC] holgerk44 at freenet dot de 
Description:
------------
trying to read large database objects (>64K) via PDO from an informix database via a stream causes a crash of the php executable 


Reproduce code:
---------------
$query=$dbh->query("select * from large ");
$row=$query->fetch(PDO::FETCH_ASSOC);
while ( $row ) {
        $file = fopen ("/tmp/large.photo.$count","w");
        $test=fread($row["PHOTO"],20000);
        while($test) {
                fwrite ( $file, $test) ;
                $test=fread($row["PHOTO"],20000);
        }
        fclose ( $file);
}



Expected result:
----------------
an error in case of misprogramming.

Actual result:
--------------
#0  0x007933dc in memcpy () from /lib/tls/libc.so.6
#1  0x081db395 in _php_stream_read (stream=0x97a4ffd, buf=0x9794d3d "",
    size=3219790640)
    at /home/php/main/streams/streams.c:618
#2  0x08180fa3 in zif_fread (ht=2, return_value=0x9760b6c,
    return_value_ptr=0x0, this_ptr=0x0, return_value_used=1)
    at /home/php/ext/standard/file.c:1811
#3  0x082192ec in zend_do_fcall_common_helper_SPEC (execute_data=0xbfeaa650)
    at /home/php/Zend/zend_vm_execute.h:192

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-02-11 01:47 UTC] pajoye@php.net 
It should not segfault but I think you misuse fread. I suppose your "photo" field is a binary object containing images? Then simply use file_put_contents to store them back to the filesystem.

As a sidenote, use error_reporting(E_ALL) in you script.
 [2006-02-11 13:21 UTC] sniper@php.net 
Please try using this CVS snapshot:

  http://snaps.php.net/php5.1-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5.1-win32-latest.zip
 [2006-02-19 01:00 UTC] php-bugs at lists dot php dot net 
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Thu Dec 04 15:00:01 2025 UTC