ID:               46551
 Comment by:       donquixote dot phplist at googlemail dot com
 Reported By:      johnpupu at gmail dot com
 Status:           No Feedback
 Bug Type:         PCRE related
 Operating System: FreeBSD 7.0-RELEASE-p4
 PHP Version:      5.2.6
 New Comment:

I found a regex / text combination that causes my apache to crash /
restart with preg_replace. The example is a reduced version of Drupal's
CSS compression regex.

The regex is not overly complex, and the text is not overly long.

Reproducing this depends on system configuration: On my webspace it
does not crash.
But, on my localhost it makes a reproducible crash. Removing a few
letters in the regexped text (no matter which) makes the bug not
happen.

More info in the linked file.

standalone "evil script" at
http://drupal.org/files/issues/test.php__1.txt
(rename to *.php)

posted here
http://drupal.org/node/444228#comment-2089300


Previous Comments:
------------------------------------------------------------------------

[2008-11-20 01:00:01] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

------------------------------------------------------------------------

[2008-11-12 13:09:09] j...@php.net

Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/

And also, you need to provide the full configure line you used to
compile PHP. If you're using anything but bundled PCRE lib -> bogus.

------------------------------------------------------------------------

[2008-11-12 06:11:26] johnpupu at gmail dot com

Description:
------------
if i use preg_replace function , my system log will show
Nov 12 13:41:31 mail kernel: pid 51185 (httpd), uid 80: exited on
signal 4

i try to use ereg_replace, mb_ereg_replace function , it works . 

so I think it's preg_replace bugs.


$sql = preg_replace("/'(\\'|\\{2}|[^'])*'/", '', $sql)

sql statement is 
INSERT IGNORE INTO bb_posts_text (post_id, post_text) VALUES (
'117766', '©i!!·q¨�...@¦~«e·í§l«e¤]«Ü±`¤w¨Ómml¸ò¤j®a¥æ¬y¤À¨É·Ó¤ù
¦ý¤§«á´N·í§L¤F ¨S¤°»ò®É¶¡ À³¸Ó»¡¤]¨S¾÷·|ª±¨ì·Ó¹³¤â¾÷
¨º®É´N¥u¦n¦b­x¤¤®³nokia ªºE60´¼¼z¤â¾÷¹L¹L°®Å}
²×©óªü ³Q§Ú¼õ¨ì°h¥î¤F...©Ò¥H©O·íµM´N¸ò
¦n´x¦ì°h¥îªº§Ì¥...@°_¥x¥hªáªfª±­Ó´x¤Ñ
³oª±ªº´X¤Ñ´Á¶¡°£¤F¥Î¬Û¾÷©ç·Ó¥~...¦]¬°¤â¾÷¥Ø«e®³ªº¬Oiphone
©Ò¥H¤]ÀH¤â®³¥X¨Ó¶Ã©ç....ÁöµM¤j®a³£ª¾¹Diphone±j¶µ¤£¦b¬Û¾÷
¬Æ¦Ü´¶¹M¦³¤H·|ı±o¥¦ªº©ç·Ó«ÜÄê...¦ý¸g¹L³o¦¸iphone¬Û¾÷³­§Ú¾Þ¤F4¤Ñ¤§«á
¦ý§Ú¯uªºÄ±±o°Õ ¥H¥Lªº200¸Uµ¥¯Å µL¦Û°Ê¹ïµJµ¥¯Å¨Ó»¡
³o¤ä©ç·Ó§Úı±o¥i¥H¦b³o¨Çµ¥¯Åªº¤â¾÷¸ÌºâÆZ«e­±ªº¤F
(ºâ¬O­È±o¹Å³\©Ô..¦Ü¤Ö¥H¥L©ç·Ó³W®æ¨Ó¬Ý..¦]¬°¥ý«e¥Î¹LµLaf200¸Uµe¯À©ç' )



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=46551&edit=1

Reply via email to