php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #66872 Crash when passing string to gmp_testbit
Submitted: 2014-03-09 20:22 UTC Modified: 2014-03-10 12:11 UTC
From: contact at dimitrifourny dot com Assigned: nikic
Status: Closed Package: Reproducible crash
PHP Version: 5.6.0alpha3 OS: Windows7 x64
Private report: No CVE-ID:
 [2014-03-09 20:22 UTC] contact at dimitrifourny dot com
Description:
------------
Hello!

I have found a possible security issues.
Can you fix it to make a more stable PHP version please?

Thank you for your good job!

Test script:
---------------
<?php
    gmp_testbit(str_repeat("A", 2000), 1);
?>

Actual result:
--------------
A nice crash on Windows 7 x64.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-03-10 11:20 UTC] pajoye@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-10 11:20 UTC] pajoye@php.net
-Status: Open +Status: Closed
 [2014-03-10 11:20 UTC] pajoye@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-10 11:45 UTC] ab@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-10 11:45 UTC] ab@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-10 12:11 UTC] nikic@php.net
-Summary: A reproductible crash in PHP 5.6 (5.6.0alpha3) +Summary: Crash when passing string to gmp_testbit -Assigned To: +Assigned To: nikic
 [2014-03-10 15:29 UTC] pajoye@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-10 15:29 UTC] pajoye@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-10 15:30 UTC] pajoye@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-10 15:30 UTC] pajoye@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-10 15:31 UTC] pajoye@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-10 15:31 UTC] pajoye@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-11 08:36 UTC] ab@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-03-11 08:36 UTC] ab@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-04-10 04:47 UTC] tyrael@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-04-10 04:47 UTC] tyrael@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-10-07 23:15 UTC] stas@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-10-07 23:15 UTC] stas@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-10-07 23:27 UTC] stas@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=28fa31d6e5000b1550d8d2b471fc0c2425165180
Log: fix #66872, invalid argument crashes gmp_testbit
 [2014-10-07 23:27 UTC] stas@php.net
Automatic comment on behalf of pierre.php@gmail.com
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=af41914e15c3c67821ad5f9a0caf11f44b938e4b
Log: fix #66872, invalid argument crashes gmp_testbit
 
PHP Copyright © 2001-2015 The PHP Group
All rights reserved.
Last updated: Thu Apr 02 01:02:10 2015 UTC