php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #64789 ext/mbstring/tests/mb_eregi.phpt crash
Submitted: 2013-05-08 11:22 UTC Modified: 2013-05-08 13:28 UTC
From: ab@php.net Assigned:
Status: Duplicate Package: mbstring related
PHP Version: Irrelevant OS: Windows x64
Private report: No CVE-ID:
 [2013-05-08 11:22 UTC] ab@php.net
Description:
------------
The aforesaid test throws the access violation error with the following BT. 
Happens on both TS and NTS builds with/without opcache. Reproducible using CLI 
binary.

	php5_debug.dll!code2_hash(unsigned long * x) Line 10861	C
 	php5_debug.dll!onig_st_add_direct(st_table * table, unsigned long key, 
unsigned long value) Line 308	C
 	php5_debug.dll!init_case_fold_table() Line 10938	C
 	
php5_debug.dll!onigenc_unicode_get_case_fold_codes_by_str(OnigEncodingTypeST * 
enc, unsigned int flag, const unsigned char * p, const unsigned char * end, 
OnigCaseFoldCodeItem * items) Line 11167	C
 	php5_debug.dll!get_case_fold_codes_by_str(unsigned int flag, const 
unsigned char * p, const unsigned char * end, OnigCaseFoldCodeItem * items) Line 
286	C
 	php5_debug.dll!expand_case_fold_string(_Node * node, re_pattern_buffer * 
reg) Line 3388	C
 	php5_debug.dll!setup_tree(_Node * node, re_pattern_buffer * reg, int 
state, ScanEnv * env) Line 3687	C
 	php5_debug.dll!onig_compile(re_pattern_buffer * reg, const unsigned char 
* pattern, const unsigned char * pattern_end, OnigErrorInfo * einfo) Line 5336	
C
 	php5_debug.dll!onig_new(re_pattern_buffer * * reg, const unsigned char * 
pattern, const unsigned char * pattern_end, unsigned int option, 
OnigEncodingTypeST * enc, OnigSyntaxType * syntax, OnigErrorInfo * einfo) Line 
5546	C
 	php5_debug.dll!php_mbregex_compile_pattern(const char * pattern, int 
patlen, unsigned int options, OnigEncodingTypeST * enc, OnigSyntaxType * syntax) 
Line 458	C
 	php5_debug.dll!_php_mb_regex_ereg_exec(int ht, _zval_struct * 
return_value, _zval_struct * * return_value_ptr, _zval_struct * this_ptr, int 
return_value_used, int icase) Line 728	C
 	php5_debug.dll!zif_mb_eregi(int ht, _zval_struct * return_value, 
_zval_struct * * return_value_ptr, _zval_struct * this_ptr, int 
return_value_used) Line 783	C


Expected result:
----------------
test pass

Actual result:
--------------
crash

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2013-05-08 11:31 UTC] ab@php.net
see bug #64769
 [2013-05-08 11:31 UTC] ab@php.net
-Status: Open +Status: Duplicate
 
PHP Copyright © 2001-2014 The PHP Group
All rights reserved.
Last updated: Sat Apr 19 14:01:50 2014 UTC