PHP :: Bug #66872 :: Crash when passing string to gmp

Bug #66872	Crash when passing string to gmp_testbit
Submitted:	2014-03-09 20:22 UTC	Modified:	2014-03-10 12:11 UTC
From:	contact at dimitrifourny dot com	Assigned:	nikic (profile)
Status:	Closed	Package:	Reproducible crash
PHP Version:	5.6.0alpha3	OS:	Windows7 x64
Private report:	No	CVE-ID:	None

View Developer Edit

Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.

Password:

Status:
Package:
Bug Type:
Summary:
From:	contact at dimitrifourny dot com
New email:
PHP Version:		OS:

New Comment:

[2014-03-09 20:22 UTC] contact at dimitrifourny dot com

Description:
------------
Hello!

I have found a possible security issues.
Can you fix it to make a more stable PHP version please?

Thank you for your good job!

Test script:
---------------
<?php
    gmp_testbit(str_repeat("A", 2000), 1);
?>

Actual result:
--------------
A nice crash on Windows 7 x64.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

[2014-03-10 11:20 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 11:20 UTC] pajoye@php.net

-Status: Open +Status: Closed

[2014-03-10 11:20 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 11:45 UTC] ab@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 11:45 UTC] ab@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 12:11 UTC] nikic@php.net

-Summary: A reproductible crash in PHP 5.6 (5.6.0alpha3) +Summary: Crash when passing string to gmp_testbit -Assigned To: +Assigned To: nikic

[2014-03-10 15:29 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:29 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:30 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:30 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:31 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-10 15:31 UTC] pajoye@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-11 08:36 UTC] ab@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-03-11 08:36 UTC] ab@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-04-10 04:47 UTC] tyrael@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-04-10 04:47 UTC] tyrael@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-10-07 23:15 UTC] stas@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-10-07 23:15 UTC] stas@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-10-07 23:27 UTC] stas@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit

[2014-10-07 23:27 UTC] stas@php.net

Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2024 The PHP Group All rights reserved.	Last updated: Tue Dec 03 17:01:29 2024 UTC