ID:               27028
 User updated by:  php at trancer dot nl
 Reported By:      php at trancer dot nl
-Status:           Closed
+Status:           Open
 Bug Type:         Reproducible crash
 Operating System: Linux Win32
 PHP Version:      4.3.5RC2
 New Comment:

and putting it effectively on open.


Previous Comments:
------------------------------------------------------------------------

[2004-02-05 13:47:19] php at trancer dot nl

Reopening

Still crashes in PHP 4.3.5RC2 on Win32, both in CLI and in Apache. 

Noticed some WEIRD behaviour in Apache handling though. First time the
script runs all right, it produces 6. Second time Apache will crash.
CLI crashes directly.

------------------------------------------------------------------------

[2004-01-25 18:15:11] [EMAIL PROTECTED]

This bug has been fixed in CVS.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.

Appears to be fixed (does not crash) in latest CVS. 

------------------------------------------------------------------------

[2004-01-23 18:24:35] php at trancer dot nl

Description:
------------
The following script causes various PHP versions to segfault: <?php
$string = 'abc'; echo $string{1} = 3+3 ?>

The following doesnt crash: <?php $string = 'abc'; echo $string{1} = 3
?>

Anything with math will make it crash (* / + - ^ etc.) just using = 3
wont make it crash. May be noted that using the php -r way it wont
core.. seems to work only being put in a file.

Results of the code on debian SID (yes, 4.3.3 but read on)are below.

---

hybrid:~# php < bla.php 
6Segmentation fault

hybrid:~# php -r "$string = 'abc'; echo $string{1} = 3+3"

Parse error: parse error in Command line code on line 1

---

(Tried) reproduced on:

WinXP + Apache 1.3.29 + PHP 4.3.4 crashed.
WinXP + PHP 4.2.3 does NOT crash

Fedora Red Hat Linux 3.3.2-1 + Apache2 + PHP 4.3.4: NOT crashed

FreeBSD 4.2: doesnt crash (4.1.2)
FreeBSD 4.5: didnt print anything (not even 6)
FreeBSD 4.6: doesnt crash 
FreeBSD 4.7: didnt print anything (not even 6) 
FreeBSD 4.8: didnt print anything (not even 6) (4.3.1)
FreeBSD 4.9-RELEASE: crash (4.3.3)

Slackware current + PHP 4.3.4: crash
Redhat 7.3 + PHP 4.3.4: prints nothing
PLD Linux: NOT crashing

Thats about all stats I could collect. Had no machines with 4.3.5RC1
around to test it.

Regards,

Reproduce code:
---------------
<?php $string = 'abc'; echo $string{1} = 3+3 ?>

Expected result:
----------------
Ehm 6, well something else in fact. Was just toying around with string
incrementing etc. Wasnt going to work obviously (needed chr/ord)
original code was 'c' - 32 instead of 3+3.

Actual result:
--------------
6Segmentation fault


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=27028&edit=1

Reply via email to