#34092 [NEW]: Compile error: tsrm_ls undeclared in php_expand_u_trim_range

[david dot tulloh at anu dot edu dot au]

From: david dot tulloh at anu dot edu dot au
Operating system: Debian Linux
PHP version:  5CVS-2005-08-12 (dev)
PHP Bug Type: Strings related
Bug description:  Compile error: tsrm_ls undeclared in php_expand_u_trim_range

Description:

I was trying to give the new unicode stuff a spin but it wouldn't
compile.



Reproduce code:
---
./cvsclean
cvs update
./buildconf
http://localhost:100/configure_line
make

Actual result:
--
/bin/sh /home/lod/Downloads/php-cvs/libtool --silent --preserve-dup-deps
--mode=compile /home/lod/Downloads/php-cvs/meta_ccld  -Iext/standard/
-I/home/lod/Downloads/php-cvs/ext/standard/ -DPHP_ATOM_INC
-I/home/lod/Downloads/php-cvs/include -I/home/lod/Downloads/php-cvs/main
-I/home/lod/Downloads/php-cvs -I/usr/include/libxml2
-I/usr/include/postgresql/8.0 -I/usr/include/tidy
-I/home/lod/Downloads/php-cvs/TSRM -I/home/lod/Downloads/php-cvs/Zend 
-D_REENTRANT  -g -O2 -pthread -DZTS  -prefer-non-pic -c
/home/lod/Downloads/php-cvs/ext/standard/string.c -o
ext/standard/string.lo 
/home/lod/Downloads/php-cvs/ext/standard/string.c: In function
`php_expand_u_trim_range':
/home/lod/Downloads/php-cvs/ext/standard/string.c:619: error: `tsrm_ls'
undeclared (first use in this function)
/home/lod/Downloads/php-cvs/ext/standard/string.c:619: error: (Each
undeclared identifier is reported only once
/home/lod/Downloads/php-cvs/ext/standard/string.c:619: error: for each
function it appears in.)
/home/lod/Downloads/php-cvs/ext/standard/string.c: In function
`zif_strstr':
/home/lod/Downloads/php-cvs/ext/standard/string.c:1915: warning:
assignment from incompatible pointer type
/home/lod/Downloads/php-cvs/ext/standard/string.c:1916: warning: passing
arg 1 of `u_strncpy_3_4' from incompatible pointer type
/home/lod/Downloads/php-cvs/ext/standard/string.c:1918: warning:
initialization from incompatible pointer type
make: *** [ext/standard/string.lo] Error 1


-- 
Edit bug report at http://bugs.php.net/?id=34092edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=34092r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=34092r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=34092r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=34092r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=34092r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=34092r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=34092r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=34092r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=34092r=support
Expected behavior:   http://bugs.php.net/fix.php?id=34092r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=34092r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=34092r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=34092r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=34092r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=34092r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=34092r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=34092r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=34092r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=34092r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=34092r=mysqlcfg

#34045 [NEW]: Buffer overflow with serialized object

[david dot tulloh at anu dot edu dot au]

From: david dot tulloh at anu dot edu dot au
Operating system: Debian Linux
PHP version:  5CVS-2005-08-09 (dev)
PHP Bug Type: Class/Object related
Bug description:  Buffer overflow with serialized object

Description:

The attached code triggers what looks to me like a buffer overflow.  I've
been able to reproduce it on two different computers running a current and
slightly older version of PHP CVS.  Reproducable through both the CLI and
Apache2. 

I stumbled across this while trying to extend SimpleTest and then cut the
code back to the smallest reproduceable subset.

I suspect that the problem starts when serializing-deserializing the
singleton object.  All the layers of seemingly redundant OOP are then
required to bring out the error.  I really have no idea why though. 

originally sent to [EMAIL PROTECTED]

Reproduce code:
---
http://cmhr118130.anu.edu.au:100/overflow.phps

Expected result:

ClassWithError::__construct - 42 - type = string(14) BasicSingleton
ClassWithError::__construct - 44 - type = string(14) BasicSingleton 

Actual result:
--
(continues past what's shown):
ClassWithError::__construct - 42 - type = string(14) BasicSingleton
ClassWithError::__construct - 44 - type = string(137552044) tI3  
PÜ]d_ÀlÔO`F
[EMAIL PROTECTED] 1OøO 1ÈOÐP 

-- 
Edit bug report at http://bugs.php.net/?id=34045edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=34045r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=34045r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=34045r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=34045r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=34045r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=34045r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=34045r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=34045r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=34045r=support
Expected behavior:   http://bugs.php.net/fix.php?id=34045r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=34045r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=34045r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=34045r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=34045r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=34045r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=34045r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=34045r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=34045r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=34045r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=34045r=mysqlcfg