php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #60264 stack/memory exhaustion
Submitted: 2011-11-11 11:49 UTC Modified: 2011-11-11 12:57 UTC
From: max at cxib dot net Assigned:
Status: Duplicate Package: *Regular Expressions
PHP Version: 5.4.0RC1 OS: linux
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: max at cxib dot net
New email:
PHP Version: OS:

 

 [2011-11-11 11:49 UTC] max at cxib dot net 
Description:
------------
pcre allow to stack or heap memory exhaustion

stack

cx () cx64:/www$ cat crash0.php
<?php
preg_match("/((.*)((!?.*)+)\\w+)/iU",str_repeat(" ",4096),$exxx);
?>
cx () cx64:/www$ php crash0.php
Segmentation fault

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2011-11-11 12:57 UTC] aharvey@php.net 
Depressingly, this is expected behaviour. See also bug #52818, amongst (many) 
others.
 [2011-11-11 12:57 UTC] aharvey@php.net
-Status: Open +Status: Duplicate
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Apr 18 09:01:27 2024 UTC