[PHP-DEV] Bug #44872 canary mismatch on efree() - heap overflow detected

2008-10-10 Thread Krister Karlström
Hi, This bug #44872 puzzles me, I experienced it today running testcases with PHPUnit on command line, thus invoking PHP CLI. I'm working on a Ubuntu Hardy 8.0.4 server, using PHP 5.2.4-2ubuntu5.3 with Suhosin-Patch 0.9.6.2 (cli). The operation mssql_free_result() is terminated by Suhosin

Re: [PHP-DEV] PHP 5.2.7RC1 Testing

2008-10-10 Thread Lester Caine
Ilia Alshanetsky wrote: The first release candidate of 5.2.7 was just released for testing and can be downloaded here: http://downloads.php.net/ilia/php-5.2.7RC1.tar.bz2 (md5sum: be7544212fe4a3ede775a3793ecd3967) The Windows binaries should become available shortly as well, for now you can

Re: [PHP-DEV] Bug #44872 canary mismatch on efree() - heap overflow detected

2008-10-10 Thread Pierre Joye
hi, On Fri, Oct 10, 2008 at 1:18 PM, Krister Karlström [EMAIL PROTECTED] wrote: Hi, This bug #44872 puzzles me, I experienced it today running testcases with PHPUnit on command line, thus invoking PHP CLI. I'm working on a Ubuntu Hardy 8.0.4 server, using PHP 5.2.4-2ubuntu5.3 with

Re: [PHP-DEV] php_firebird

2008-10-10 Thread Pierre Joye
hi Lester, On Tue, Oct 7, 2008 at 8:18 PM, Lester Caine [EMAIL PROTECTED] wrote: What is the correct procedure to create a new driver, or rather clone the existing php_interbase so that we can build a proper Firebird version that actually uses the fbclient.dll rather than sharing the now

Re: [PHP-DEV] json_encode ignores protected/private class members

2008-10-10 Thread Richard Quadling
2008/10/9 Rodrigo Saboya [EMAIL PROTECTED]: Jarismar Chaves da Silva wrote: I agree with you. But when using json_encode I believe the developer wants to transfer the complete object state, just like when using serialize. Serialize does see private/protected class members, while json_encode

Re: [PHP-DEV] License for Windows binaries

2008-10-10 Thread Hannes Magnusson
On Fri, Oct 10, 2008 at 05:40, William A. Rowe, Jr. [EMAIL PROTECTED] wrote: Cristian Rodríguez wrote: 田中 裕一 escribió: Hi all, Could anyone tell me the license of the binaries and source code placed here? http://pecl2.php.net/downloads/php-windows-builds/ there is no restriction on using

Re: [PHP-DEV] json_encode ignores protected/private class members

2008-10-10 Thread Richard Quadling
2008/10/10 Jarismar Chaves da Silva [EMAIL PROTECTED]: Rodrigo Saboya wrote: Jarismar Chaves da Silva wrote: I agree with you. But when using json_encode I believe the developer wants to transfer the complete object state, just like when using serialize. Serialize does see

Re: [PHP-DEV] php_firebird

2008-10-10 Thread marius popa
On Fri, Oct 10, 2008 at 3:50 PM, Pierre Joye [EMAIL PROTECTED] wrote: hi Lester, On Tue, Oct 7, 2008 at 8:18 PM, Lester Caine [EMAIL PROTECTED] wrote: What is the correct procedure to create a new driver, or rather clone the existing php_interbase so that we can build a proper Firebird

Re: [PHP-DEV] License for Windows binaries

2008-10-10 Thread Ulf Wendel
William A. Rowe, Jr. schrieb: Well, the binaries probably include c runtimes under liberal MS license. They might be kind and give you mysql and a host of other GPL features under a very restrictive license. With any PHP before 5.3, you'll have to compile any of the MySQL extensions

Re: [PHP-DEV] json_encode ignores protected/private class members

2008-10-10 Thread Jarismar Chaves da Silva
Rodrigo Saboya wrote: Jarismar Chaves da Silva wrote: I agree with you. But when using json_encode I believe the developer wants to transfer the complete object state, just like when using serialize. Serialize does see private/protected class members, while json_encode not. Javascript does

Re: [PHP-DEV] Bug #44872 canary mismatch on efree() - heap overflow detected

2008-10-10 Thread Ilia Alshanetsky
The error messages comes from Suhosin, which is why a basic PHP environment does not exhibit this problem. What I can ask you to try is to run the affected code on a basic PHP environment through valgrind and see if it reports any errors. If it does not, there is a chance it maybe a false

Re: [PHP-DEV] php_firebird

2008-10-10 Thread marius popa
On Fri, Oct 10, 2008 at 3:50 PM, Pierre Joye [EMAIL PROTECTED] wrote: hi Lester, On Tue, Oct 7, 2008 at 8:18 PM, Lester Caine [EMAIL PROTECTED] wrote: What is the correct procedure to create a new driver, or rather clone the existing php_interbase so that we can build a proper Firebird

Re: [PHP-DEV] PHP 5.2.7RC1 Testing

2008-10-10 Thread Ilia Alshanetsky
Tim, The issue has not been looked at further, the issue with charsets is pretty close to what you've described in the quoted e-mail. Unfortunately, I do not see a fix at this time that would retain the security measures and retain BC. On 9-Oct-08, at 11:48 PM, Tim Starling wrote:

Re: [PHP-DEV] Bug #44872 canary mismatch on efree() - heap overflow detected

2008-10-10 Thread Krister Karlström
Hi, Yes, I do understand that you only support official versions of PHP and I totally agree with you. No, I haven't tried to catch the error using valgrind yet. I just wanted to raise the question, since I'm not really sure whether this is a problem caused by the Suhosin patch or if it's

Re: [PHP-DEV] Bug #44872 canary mismatch on efree() - heap overflow detected

2008-10-10 Thread Krister Karlström
OK, thanks Ilia! I'm gonna try the valgrind. Will report back later. /Krister Karlström Ilia Alshanetsky wrote: The error messages comes from Suhosin, which is why a basic PHP environment does not exhibit this problem. What I can ask you to try is to run the affected code on a basic PHP

Re: [PHP-DEV] Bug #44872 canary mismatch on efree() - heap overflow detected

2008-10-10 Thread Stefan Esser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, a false positive on the part of Suhosin. If it does report a problem however, then mssql extension has a bug and valgrind output should be good enough to identify the where the why. valgrind cannot (by definition) see all memory problems

Re: [PHP-DEV] Bug #44872 canary mismatch on efree() - heap overflow detected

2008-10-10 Thread Pierre Joye
hi, On Fri, Oct 10, 2008 at 5:03 PM, Stefan Esser [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, a false positive on the part of Suhosin. If it does report a problem however, then mssql extension has a bug and valgrind output should be good enough to identify

Re: [PHP-DEV] php_firebird

2008-10-10 Thread Pierre Joye
On Fri, Oct 10, 2008 at 4:54 PM, marius popa [EMAIL PROTECTED] wrote: On Fri, Oct 10, 2008 at 3:50 PM, Pierre Joye [EMAIL PROTECTED] wrote: hi Lester, On Tue, Oct 7, 2008 at 8:18 PM, Lester Caine [EMAIL PROTECTED] wrote: What is the correct procedure to create a new driver, or rather clone

Re: [PHP-DEV] Bug #44872 canary mismatch on efree() - heap overflow detected

2008-10-10 Thread Krister Karlström
Hi! I re-run the small simple script that I posted on the bug tracking page. This time I used a Slackware server with PHP 5.2.5 (no Suhosin or other patches), compiled from source. php -v gives: PHP 5.2.5 (cli) (built: Mar 28 2008 12:02:55) Copyright (c) 1997-2007 The PHP Group Zend Engine

Re: [PHP-DEV] namespaces and alpha3

2008-10-10 Thread Geoffrey Sneddon
On 10 Oct 2008, at 06:03, Lukas Kahwe Smith wrote: 1) rip them out I'm +1 on this. We simply don't have consensus, and I don't see anyway we can have consensus by the time 5.3 has to be frozen. Once namespaces are in, we're gonna have to stick with whatever we choose, unless we totally

Re: [PHP-DEV] namespaces and alpha3

2008-10-10 Thread Stanislav Malyshev
Hi! 3) Stas proposal I have two proposals, actually. 1. Leave functions (and constant) alone, i.e. namespace would ignore that. 1.1 Option: if you define function inside namespace, compiler could give an error (I don't like this option, but I mention it for the sake of completeness). 2.

[PHP-DEV] segfault after an invalid read of size 8

2008-10-10 Thread Olivier Bonvalet
Hello, I have a script which throw a segfault, in cli with PHP 5.2.6 (I just recompiled it from source). I track the error with valgrind, and obtain this as a result : ==17069== Invalid read of size 8 ==17069==at 0x6CBCAC: _zend_mm_alloc_int (zend_alloc.c:1767) ==17069==by 0x6CC1DF:

Re: [PHP-DEV] segfault after an invalid read of size 8

2008-10-10 Thread Felipe Pena
Em Sex, 2008-10-10 às 18:58 +0200, Olivier Bonvalet escreveu: Hello, I have a script which throw a segfault, in cli with PHP 5.2.6 (I just recompiled it from source). I track the error with valgrind, and obtain this as a result : ==17069== Invalid read of size 8 ==17069==at

Re: [PHP-DEV] segfault after an invalid read of size 8

2008-10-10 Thread Olivier Bonvalet
Thanks, with this version I obtain this valgrind output : ==6577== Conditional jump or move depends on uninitialised value(s) ==6577==at 0x6CB2DB: _zend_mm_free_int (zend_alloc.c:1941) ==6577==by 0x710210: ZEND_CONCAT_SPEC_CV_TMP_HANDLER (zend_variables.h:35) ==6577==by 0x709D63:

Re: [PHP-DEV] __getStatic

2008-10-10 Thread Stanislav Malyshev
Hi! I've updated the patch and added some tests with it. http://sitten-polizei.de/php/getstatic.diff Looked at the patch. There's some things I noticed there: 1. _getstatic-common.fn_flags |= ~ZEND_ACC_ALLOW_STATIC; What was the idea here? Maybe ~ is not intended? 2. Do we really need