php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #42576 stack smashing attack in function php_pcre_compile2
Submitted: 2007-09-06 12:49 UTC Modified: 2007-09-15 01:00 UTC
From: nivedg at gmail dot com Assigned:
Status: No Feedback Package: Apache2 related
PHP Version: 4.4.7 OS: Linux 2.4.32
Private report: No CVE-ID: None
View Add Comment Developer Edit
Have you experienced this issue?
Rate the importance of this bug to you:

 [2007-09-06 12:49 UTC] nivedg at gmail dot com 
Description:
------------
I keep getting this error message in /var/log/httpd/error_log : 

httpd: stack smashing attack in function php_pcre_compile2[Thu Sep 06 04:26:53 2007] [notice] child pid 20857 exit signal A
borted (6)
httpd: stack smashing attack in function php_pcre_compile2[Thu Sep 06 04:26:56 2007] [notice] child pid 20799 exit signal A
borted (6)

Apache version: 2.0.59
Php version: 4.4.7
Extensions used: gd and mysql

I'm using Mambo CMS on this server. Don't know what is causing this error.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2007-09-07 11:53 UTC] nlopess@php.net 
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.

without further info there's little we can do about this.
anyway I would say this is a typical pcre out-of-stack recursion.
#this reminds me I have to upgrade pcre in the php 4 branch..
 [2007-09-15 01:00 UTC] php-bugs at lists dot php dot net 
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu May 16 01:01:33 2024 UTC