On 02/13/2007 11:12 PM, Ilia Alshanetsky wrote:
http://cvs.php.net/viewvc.cgi/php-src/ext/imap/php_imap.c?r1=1.208.2.7.2.16&r2=1.208.2.7.2.17&diff_format=u
Index: php-src/ext/imap/php_imap.c
diff -u php-src/ext/imap/php_imap.c:1.208.2.7.2.16 
php-src/ext/imap/php_imap.c:1.208.2.7.2.17
--- php-src/ext/imap/php_imap.c:1.208.2.7.2.16  Thu Jan 18 14:03:38 2007
+++ php-src/ext/imap/php_imap.c Tue Feb 13 20:12:52 2007
@@ -26,7 +26,7 @@
    | PHP 4.0 updates:  Zeev Suraski <[EMAIL PROTECTED]>                       |
    +----------------------------------------------------------------------+
  */
-/* $Id: php_imap.c,v 1.208.2.7.2.16 2007/01/18 14:03:38 tony2001 Exp $ */
+/* $Id: php_imap.c,v 1.208.2.7.2.17 2007/02/13 20:12:52 iliaa Exp $ */
#define IMAP41 @@ -2215,6 +2215,9 @@
        if (dest.data) {
                free(dest.data);
        }
+       if (src.data) {
+               free(src.data);
+       }
 }
 /* }}} */

This is what I see after this patch (confirmed by Hannes):

# ./sapi/cli/php -r 'var_dump(imap_utf8(""));'
*** glibc detected *** double free or corruption (fasttop): 0x08458658 ***
Aborted

==8685== Invalid free() / delete / delete[]
==8685==    at 0x401D297: free (vg_replace_malloc.c:233)
==8685==    by 0x8106713: zif_imap_utf8 (php_imap.c:2219)
==8685==    by 0x828ED19: zend_do_fcall_common_helper_SPEC 
(zend_vm_execute.h:200)
==8685==    by 0x8291D3F: ZEND_DO_FCALL_SPEC_CONST_HANDLER 
(zend_vm_execute.h:1681)
==8685==    by 0x828E92C: execute (zend_vm_execute.h:92)
==8685==    by 0x8263860: zend_eval_string (zend_execute_API.c:1151)
==8685==    by 0x82639C0: zend_eval_string_ex (zend_execute_API.c:1185)
==8685==    by 0x82D5B83: main (php_cli.c:1160)
==8685==  Address 0x4708D90 is 0 bytes inside a block of size 1 free'd
==8685==    at 0x401D297: free (vg_replace_malloc.c:233)
==8685==    by 0x81066FF: zif_imap_utf8 (php_imap.c:2216)
==8685==    by 0x828ED19: zend_do_fcall_common_helper_SPEC 
(zend_vm_execute.h:200)
==8685==    by 0x8291D3F: ZEND_DO_FCALL_SPEC_CONST_HANDLER 
(zend_vm_execute.h:1681)
==8685==    by 0x828E92C: execute (zend_vm_execute.h:92)
==8685==    by 0x8263860: zend_eval_string (zend_execute_API.c:1151)
==8685==    by 0x82639C0: zend_eval_string_ex (zend_execute_API.c:1185)
==8685==    by 0x82D5B83: main (php_cli.c:1160)


--
Wbr, Antony Dovgal

--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to