From:             xanthor at xanthor dot tk
Operating system: Linux, WindowsXP©
PHP version:      4.3.6
PHP Bug Type:     PCRE related
Bug description:  segmentation fault when using backreferences on a long string

Description:
------------
This line crash PHP with a segmentation fault.
It use a 3-chars-long back reference, on a 2236+3 chars-long string 


If the back references is only 2 chars long, it's ok.
If the long string is less that 2236+3 chars, it's ok too...

Reproduce code:
---------------
preg_match("/(((?<!aaa).)*)(?<!aaa)aaa/",str_repeat(' ',2236).'aaa',$z);




Expected result:
----------------
No crash, and true return by the preg_match

Actual result:
--------------
segmentation fault

-- 
Edit bug report at http://bugs.php.net/?id=28461&edit=1
-- 
Try a CVS snapshot (php4):  http://bugs.php.net/fix.php?id=28461&r=trysnapshot4
Try a CVS snapshot (php5):  http://bugs.php.net/fix.php?id=28461&r=trysnapshot5
Fixed in CVS:               http://bugs.php.net/fix.php?id=28461&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=28461&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=28461&r=needtrace
Need Reproduce Script:      http://bugs.php.net/fix.php?id=28461&r=needscript
Try newer version:          http://bugs.php.net/fix.php?id=28461&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=28461&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=28461&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=28461&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=28461&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=28461&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=28461&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=28461&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=28461&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=28461&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=28461&r=float

Reply via email to