php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #68884 Null pointer deference
Submitted: 2015-01-22 08:55 UTC Modified: 2015-01-22 20:47 UTC
From: bugreports at internot dot info Assigned: ab (profile)
Status: Closed Package: intl (PECL)
PHP Version: master-Git-2015-01-22 (Git) OS: Linux Ubuntu 14.04
Private report: No CVE-ID: None
View Developer Edit
 [2015-01-22 08:55 UTC] bugreports at internot dot info 
Description:
------------
Hi,
In /ext/intl/breakiterator/breakiterator_iterators.cpp:


258        if (method->len == sizeof("getrulestatus") - 1
259                        && memcmp("getrulestatus", Z_STRVAL_P(key), 


But it is possible for key to be NULL(see 3 lines above that code)


Thanks,

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2015-01-22 14:03 UTC] ab@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: ab
 [2015-01-22 14:03 UTC] ab@php.net 
Thanks for reporting Joshua, fixed in master. As it's a master only issue, it can be opened. Cheers.
 [2015-01-22 20:47 UTC] stas@php.net
-Type: Security +Type: Bug
 [2016-07-20 11:39 UTC] davey@php.net 
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=699ada706a359981f746f8ec86584fc05a313356
Log: Fixed bug #68884 Null pointer deference
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Sat Mar 15 09:01:28 2025 UTC