ID: 28461
User updated by: xanthor at xanthor dot tk
Reported By: xanthor at xanthor dot tk
Status: Open
Bug Type: PCRE related
Operating System: Linux, WindowsXP©
-PHP Version: 4.3.8; 4.3.9RC1, 5.0.1
+PHP Version: 4.3.9, 5.0.2
New Comment:
The regexs still crash PHP 4.3.9 and PHP 5.0.2
Previous Comments:
------------------------------------------------------------------------
[2004-09-16 15:50:47] [EMAIL PROTECTED]
your last regex crashes PHP 5 also.
The segfault isn't in PHP but in pcre (this is quite normal due to the
NFA nature of pcre).
------------------------------------------------------------------------
[2004-09-10 17:01:41] hewei at ied dot org dot cn
preg_match("/(((?<!aaa).)*)(?<!aaa)aaa/",str_repeat('
',10882).'aaa',$z);
crashes PHP4.3.9RC2
But not on php-4.3.2-11.1.ent (WBEL 3.0), the length
to trigger segmentation fault is about 19230.
The most funny thing is that the more closer to the limit, the more
likely you will get a random segmentation fault.
Not only the above pattern will cause the error,
preg_match("/^( )*$/",str_repeat(' ',19250));
will too.
------------------------------------------------------------------------
[2004-09-10 12:49:48] [EMAIL PROTECTED]
Please try using this CVS snapshot:
http://snaps.php.net/php5-STABLE-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php5.0-win32-latest.zip
I couldn't reproduce any of the crashes.
------------------------------------------------------------------------
[2004-08-23 11:24:50] xanthor at xanthor dot tk
Updating version :
I've found an other expression which segfaults also PHP 5 :
preg_match("/^((?<!a).)*/",str_repeat('b',21236),$z);
------------------------------------------------------------------------
[2004-07-19 11:11:33] xanthor at xanthor dot tk
The bug is still here with PHP 4.3.8
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/28461
--
Edit this bug report at http://bugs.php.net/?id=28461&edit=1
