php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #68693 uninitalized pointer in PDO handling
Submitted: 2014-12-30 05:06 UTC Modified: 2016-07-10 17:15 UTC
From: bugreports at internot dot info Assigned:
Status: Not a bug Package: PDO related
PHP Version: master-Git-2014-12-30 (Git) OS: Linux Ubuntu 14.04
Private report: No CVE-ID: None
 [2014-12-30 05:06 UTC] bugreports at internot dot info
Description:
------------
Hi,

In /ext/pdo/pdo_sql_parser.c, an uninitalized pointer read may occur:


424        Scanner s;
[..]
440        while((t = scan(&s)) != PDO_PARSER_EOI) {

scan() will try to read s.ptr, which does not exist.


Thanks,


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2016-07-10 17:15 UTC] mbeccati@php.net
-Status: Open +Status: Not a bug
 [2016-07-10 17:15 UTC] mbeccati@php.net
If you look closely, such read doesn't occur in the code is generated by re2c.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu Dec 26 18:01:31 2024 UTC