php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #69462 __soapCall with a SoapVar that has a namespace but no name crashes
Submitted: 2015-04-15 13:21 UTC Modified: 2015-06-26 20:30 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:0 (0.0%)
From: jere dot kankaanranta at codecoast dot fi Assigned: cmb (profile)
Status: Closed Package: SOAP related
PHP Version: 5.6.7 OS: CentOS release 6.4 (Final)
Private report: No CVE-ID: None
View Developer Edit
 [2015-04-15 13:21 UTC] jere dot kankaanranta at codecoast dot fi 
Description:
------------
Calling SoapClient::__soapCall() with a SoapVar that has a namespace but no name causes PHP to segfault. This also happens if the SoapVar is in input headers.

Test script:
---------------
<?php

$client = new \SoapClient('http://www.webservicex.com/globalweather.asmx?wsdl');
$namespace = 'http://www.webserviceX.NET';
$response = $client->__soapCall(
    'GetCitiesByCountry',
    [
        new \SoapVar(
            // [new \SoapVar('United States', XSD_STRING, null, null, 'CountryName', $namespace)], // ok
            [new \SoapVar('United States', XSD_STRING, null, null, null, $namespace)], // segfault
            SOAP_ENC_OBJECT,
            null,
            null,
            'GetCitiesByCountry',
            $namespace
        )
    ]
);

print_r($response);

Patches

Pull Requests

Pull requests:

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2015-04-22 03:36 UTC] laruence@php.net 
what I got is:

Fatal error: Uncaught SoapFault exception: [Client] Function ("GetCitiesByCountry") is not a valid method for this service in /tmp/1.php:18
Stack trace:
#0 /tmp/1.php(18): SoapClient->__soapCall('GetCitiesByCoun...', Array)
#1 {main}
  thrown in /tmp/1.php on line 18


anything mistake?
 [2015-04-24 13:22 UTC] eescalona at carqualifier dot com 
I had the same issue. Almost three trying to figure out what's wrong.

Thanks. At least now I know what's going on.
 [2015-04-27 22:38 UTC] cmb@php.net 
I can run the supplied test script (PHP 5.6.8, Windows 7). The
result is:

| PHP Fatal error: Uncaught SoapFault exception: [soap:Server]
| System.Web.Services.Protocols.SoapException: Server was unable to
| process request. ---> System.Data.SqlClient.SqlException:
| Procedure or function 'getWCity' expects parameter '@CountryName',
| which was not supplied.at
| WebServicex.GlobalWeather.GetCitiesByCountry(String CountryName)
| [...]
 [2015-06-25 16:30 UTC] falundir at gmail dot com 
PHP 5.6.6: OK
PHP 5.6.7: Segmentation fault
PHP 5.6.8: OK

Error was introduced in commit c8eaca013a3922e8383def6158ece2b63f6ec483 and fixed in commit 76c1ec5e96640e3076c105bde2cccfceb7557690.

Better test script:

$namespace = "http://example.com/ns";

$client = new SoapClient(null, [ 'exceptions' => 1, 'location' => "http://localhost", 'uri' => $namespace ]);

$soapvar = new SoapVar(
	array(
		new SoapVar('value', XSD_STRING, null, null, null, $namespace)
	),
	SOAP_ENC_OBJECT, null, null, 'name', $namespace
);

try {
	$client->__soapCall('method', array($soapvar));
}
catch (Exception $e) {
	echo "good";
}
 [2015-06-26 20:30 UTC] cmb@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: cmb
 [2015-06-26 20:30 UTC] cmb@php.net 
@falundir: Thanks for the investigation. I'll have a look at the
PR.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Sat Nov 01 03:00:01 2025 UTC