php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #57972 zend_mm_heap corrupted
Submitted: 2007-12-14 16:44 UTC Modified: 2008-10-27 14:19 UTC
From: davemcnelis at optonline dot net Assigned: ramsey (profile)
Status: Not a bug Package: uploadprogress (PECL)
PHP Version: 5.2.1 OS: Ubuntu 7.10
Private report: No CVE-ID: None
View Developer Edit
 [2007-12-14 16:44 UTC] davemcnelis at optonline dot net 
Description:
------------
When uploading many files, especially very large ones - PHP dies with "zend_mm_heap corrupted" in Apache2 error log.

Narrowed down problem to emalloc for upload id (uploadprogress.c, ~line 105, revision 1.12).  It only allocates enough for string and not the null terminator.  Code should be:

upload_id = emalloc(strlen(*e_data->value)+1);

The strcpy(upload_id, *e_data->value) would overwrite the null terminator one too far.  Eventually that extra byte would corrupt the zend heap.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2008-10-27 14:19 UTC] chregu@php.net 
Thank you for taking the time to report a problem with the package.
Unfortunately you are not using a current version of the package -- 
the problem might already be fixed. Please download a new
version from http://pecl.php.net/packages.php

If you are able to reproduce the bug with one of the latest
versions, please change the package version on this bug report
to the version you tested and change the status back to "Open".
Again, thank you for your continued support of PECL.

Please try the latest version, it should be fixed there
 [2011-09-03 21:20 UTC] pgakamine at sweet dot ocn dot ne dot jp 
http://www.pillslife.net/ accutane :-O http://www.findyourpills.net/ colchicine increase ojrezp
 [2011-09-14 19:53 UTC] h-taira at galaxy dot ocn dot ne dot jp 
http://www.yourpillshouse.com/ colchicine and improving taste nxgah http://www.topratedpills.net/ topamax 272703
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Tue Jul 01 13:01:35 2025 UTC