Edit report at https://bugs.php.net/bug.php?id=60976&edit=1
ID: 60976
User updated by: xrstf-misc at yahoo dot com
Reported by: xrstf-misc at yahoo dot com
Summary: PHP crashes sometimes while parsing
Status: Open
Type: Bug
Package: Reproducible crash
Operating System: Win7x64
PHP Version: 5.3.10
Block user comment: N
Private report: N
New Comment:
This is actually a good hint by hanssen at aeteurope dot nl: I too had some cases
where a generated cache file (containing "<?php $data = var_export(...)") would
crash PHP when it was exactly 4096 Byte in size.
Previous Comments:
------------------------------------------------------------------------
[2012-02-09 13:59:24] hanssen at aeteurope dot nl
I experience an issue which I think is caused by the same bug (PHP crashes in line 3182 of Zend/zend_language_scanner.c (contains "if ((yych = *YYCURSOR) == '\n') goto yy203;", part of function lex_scan()).
In my case I call php_strip_whitespace() on a PHP file with a length of exactly 4096 bytes (the same length as the problem file reported by the original author of this bug) and where the file ends with "?>" without trailing newline.
Inspection of lines 3181 and 3182 of Zend/zend_language_scanner.c reveals YYCURSOR being advanced one byte and a '\n' being expected, which fails here because it attempts to read memory beyond allocated memory.
------------------------------------------------------------------------
[2012-02-06 17:23:08] giunta dot gaetano at gmail dot com
I also have php crashes - win7 64, apache 2.2.21 from apache lounge.
No error messages left in either php or apache logs - just a "server reset connection" error from the browser.
The code ran fine up to php 5.3.8 (did not test with 539).
It involves executing a custom page within eZPublish, it is hard for me to trace it to a single php file / command and attach it here...
------------------------------------------------------------------------
[2012-02-05 15:19:32] xrstf-misc at yahoo dot com
Here is the original file, wrapped in an 7z archive:
http://www.xrstf.de/bug60976.7z (1KB)
------------------------------------------------------------------------
[2012-02-04 07:39:19] pajoye@php.net
Ah you already did. Which EOL do you use on your original script? Unix or windows
ones?
Maybe zip it and post a link to the zip file, so the contents won't be altered
(lexer bug).
------------------------------------------------------------------------
[2012-02-04 07:37:39] pajoye@php.net
Please provide us the full script you use to reprodruce the crash.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=60976
--
Edit this bug report at https://bugs.php.net/bug.php?id=60976&edit=1
|