php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #71132 2 segfaults in PHP's range() function
Submitted: 2015-12-15 23:29 UTC Modified: 2015-12-15 23:32 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: tpunt@php.net Assigned: tpunt (profile)
Status: Closed Package: Reproducible crash
PHP Version: 7.0.0 OS: Mac OS X Yosemite
Private report: No CVE-ID: None
View Add Comment Developer Edit
 [2015-12-15 23:29 UTC] tpunt@php.net 
Description:
------------
There's two segmentation faults in PHP's range() function. These can both be reproduced below.

I will submit a PR shortly referencing this bug report.

Test script:
---------------
range(PHP_INT_MIN + 513, PHP_INT_MIN); // Seg fault on line 2236
range(PHP_INT_MAX - 512, PHP_INT_MAX); // Seg fault on line 2249

Actual result:
--------------
Segmentation fault: 11
Segmentation fault: 11

Patches

range-segfault-patch (last revision 2015-12-15 23:37 UTC by tpunt@php.net)

Add a Patch

Pull Requests

Pull requests:

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2015-12-15 23:32 UTC] tpunt@php.net
-Assigned To: +Assigned To: tpunt
 [2015-12-15 23:37 UTC] tpunt@php.net 
The following patch has been added/updated:

Patch Name: range-segfault-patch
Revision:   1450222672
URL:        https://bugs.php.net/patch-display.php?bug=71132&patch=range-segfault-patch&revision=1450222672
 [2015-12-15 23:38 UTC] tpunt@php.net 
PR: https://github.com/php/php-src/pull/1677
 [2016-01-12 07:35 UTC] ab@php.net 
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=391b73b48431aa016e396dc9ad9742e9b1f71cbf
Log: update NEWS for fixed bug #71132, fixed bug #71197
 [2016-01-12 07:35 UTC] ab@php.net
-Status: Assigned +Status: Closed
 [2016-07-20 11:34 UTC] davey@php.net 
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=391b73b48431aa016e396dc9ad9742e9b1f71cbf
Log: update NEWS for fixed bug #71132, fixed bug #71197
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Fri Apr 19 05:01:29 2024 UTC