php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #67873 Segfaults in php_wddx_serialize_var
Submitted: 2014-08-20 12:58 UTC Modified: 2014-08-20 13:14 UTC
From: remi@php.net Assigned: remi (profile)
Status: Closed Package: WDDX related
PHP Version: 5.4.31 OS: RHEL-7
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: remi@php.net
New email:
PHP Version: OS:

 

 [2014-08-20 12:58 UTC] remi@php.net 
Description:
------------
Segfaults occurs running Zend Framework test suite on RHEL-7 (buld with -fstack-protector-strong)

Already fixed in 5.5+
http://git.php.net/?p=php-src.git;a=patch;h=95ea1e7ca787537a93c25c401dba010d51aa8d59


Test script:
---------------
phpunit ZendTest/Serializer/Adapter/WddxTest.php


Expected result:
----------------
no segfault

Actual result:
--------------
(gdb) bt
#0  0x00007ffff4728989 in raise () from /lib64/libc.so.6
#1  0x00007ffff472a098 in abort () from /lib64/libc.so.6
#2  0x00007ffff4769197 in __libc_message () from /lib64/libc.so.6
#3  0x00007ffff4800cb7 in __fortify_fail () from /lib64/libc.so.6
#4  0x00007ffff4800c80 in __stack_chk_fail () from /lib64/libc.so.6
#5  0x00007fffe1d1c667 in php_wddx_serialize_var (packet=packet@entry=0x5555563e3a10, var=<optimized out>, name=name@entry=0x0, name_len=name_len@entry=0)
    at /usr/src/debug/php-5.4.16/ext/wddx/wddx.c:687
#6  0x00007fffe1d1e0f4 in zif_wddx_serialize_value (ht=<optimized out>, return_value=0x5555563e19c0, return_value_ptr=<optimized out>, 
    this_ptr=<optimized out>, return_value_used=<optimized out>) at /usr/src/debug/php-5.4.16/ext/wddx/wddx.c:1173

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-08-20 13:01 UTC] remi@php.net
-Assigned To: +Assigned To: remi
 [2014-08-20 13:14 UTC] remi@php.net
-Status: Assigned +Status: Closed
 [2014-08-20 13:14 UTC] remi@php.net 
The fix for this bug has been committed.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.

http://git.php.net/?p=php-src.git;a=commitdiff;h=20941b71aae2775b1364a681916c61e71861ce17
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Tue Dec 03 17:01:29 2024 UTC