php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #23212 Segfault in convert_to_string_ex()
Submitted: 2003-04-14 15:53 UTC Modified: 2003-04-28 11:36 UTC
From: mbr at freebsd dot org Assigned:
Status: No Feedback Package: Strings related
PHP Version: 4CVS-2003-04-14 (stable) OS: FreeBSD 4.8
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If this is not your bug, you can add a comment by following this link.
If this is your bug, but you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: mbr at freebsd dot org
New email:
PHP Version: OS:

 

 [2003-04-14 15:53 UTC] mbr at freebsd dot org 
#0  0x2849784d in zif_strip_tags (ht=0, return_value=0x0, this_ptr=0xbfbff6b0, return_value_used=675793406)
    at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/standard/string.c:3062
#1  0x2847ca65 in php_info_print_table_colspan_header (num_cols=0, header=0x0)
    at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/standard/info.c:708
#2  0x284bf32d in XMLRPC_to_PHP (el=0x833c7d8) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/xmlrpc/xmlrpc-epi-php.c:618
#3  0x284bfecc in zif_xmlrpc_server_register_introspection_callback (ht=137611224, return_value=0x0, this_ptr=0x0,
    return_value_used=676069140) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/xmlrpc/xmlrpc-epi-php.c:1002
#4  0x284bff2a in zif_xmlrpc_server_register_introspection_callback (ht=137611224, return_value=0x28512f5f, this_ptr=0x17,
    return_value_used=134559025) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/xmlrpc/xmlrpc-epi-php.c:1011
#5  0x80537b8 in ap_invoke_handler ()
#6  0x80635cd in process_request_internal ()
#7  0x80638b5 in ap_internal_redirect ()
#8  0x282a4b21 in handle_dir () from /usr/local/libexec/apache/mod_dir.so
#9  0x80537b8 in ap_invoke_handler ()
#10 0x80635cd in process_request_internal ()
#11 0x806362c in ap_process_request ()
#12 0x805c8fa in child_main ()
#13 0x805cb31 in make_child ()
#14 0x805cda0 in perform_idle_server_maintenance ()
#15 0x805d24d in standalone_main ()
#16 0x805d79f in main ()
#17 0x804fb9e in _start ()
(gdb) frame 0
#0  0x2849784d in zif_strip_tags (ht=0, return_value=0x0, this_ptr=0xbfbff6b0, return_value_used=675793406)
    at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/standard/string.c:3062
3062            convert_to_string_ex(str);
(gdb) list
3057                            break;
3058                    default:
3059                            WRONG_PARAM_COUNT;
3060                            break;
3061            }
3062            convert_to_string_ex(str);
3063            buf = estrndup(Z_STRVAL_PP(str), Z_STRLEN_PP(str));
3064            retval_len = php_strip_tags(buf, Z_STRLEN_PP(str), NULL, allowed_tags, allowed_tags_len);
3065            RETURN_STRINGL(buf, retval_len, 0);
3066    }
(gdb) p str
$3 = (struct _zval_struct **) 0x2853f864
(gdb) p *str
$4 = (struct _zval_struct *) 0x0

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2003-04-17 06:32 UTC] moriyoshi@php.net 
Please provide a minimal and self-contained snippet so we can reproduce the problem.
 [2003-04-23 00:29 UTC] sniper@php.net 
Still waiting for the repro script..
 [2003-04-28 11:36 UTC] sniper@php.net 
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Tue Apr 23 10:01:29 2024 UTC