php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #68884 Null pointer deference
Submitted: 2015-01-22 08:55 UTC Modified: 2015-01-22 20:47 UTC
From: bugreports at internot dot info Assigned: ab (profile)
Status: Closed Package: intl (PECL)
PHP Version: master-Git-2015-01-22 (Git) OS: Linux Ubuntu 14.04
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: bugreports at internot dot info
New email:
PHP Version: OS:

 

 [2015-01-22 08:55 UTC] bugreports at internot dot info 
Description:
------------
Hi,
In /ext/intl/breakiterator/breakiterator_iterators.cpp:


258        if (method->len == sizeof("getrulestatus") - 1
259                        && memcmp("getrulestatus", Z_STRVAL_P(key), 


But it is possible for key to be NULL(see 3 lines above that code)


Thanks,

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2015-01-22 14:03 UTC] ab@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: ab
 [2015-01-22 14:03 UTC] ab@php.net 
Thanks for reporting Joshua, fixed in master. As it's a master only issue, it can be opened. Cheers.
 [2015-01-22 20:47 UTC] stas@php.net
-Type: Security +Type: Bug
 [2016-07-20 11:39 UTC] davey@php.net 
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=699ada706a359981f746f8ec86584fc05a313356
Log: Fixed bug #68884 Null pointer deference
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Sun Jan 05 01:01:28 2025 UTC