From:             marrtins at hackers dot lv
Operating system: w2k sp4
PHP version:      4CVS-2003-10-08 (stable)
PHP Bug Type:     Session related
Bug description:  apache crash

Description:
------------
1st time of session_start() reproduces notice
Notice: Uninitialized string offset: 0 in d:\crash_php\index.php on line
70

2nd time crash


apache crash
Zend/zend_hash.c
------------------
ZEND_API int zend_hash_find(HashTable *ht, char *arKey, uint nKeyLength,
void **pData)
...
  while (p != NULL) {
    if ((p->h == h) && (p->nKeyLength == nKeyLength)) { // <-- access
violation
      if (!memcmp(p->arKey, arKey, nKeyLength)) {
        *pData = p->pData;
        return SUCCESS;
      }
    }
    p = p->pNext;
  }
  return FAILURE;
}

Reproduce code:
---------------
http://paste.php.lv/429


-- 
Edit bug report at http://bugs.php.net/?id=25788&edit=1
-- 
Try a CVS snapshot (php4):  http://bugs.php.net/fix.php?id=25788&r=trysnapshot4
Try a CVS snapshot (php5):  http://bugs.php.net/fix.php?id=25788&r=trysnapshot5
Fixed in CVS:               http://bugs.php.net/fix.php?id=25788&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=25788&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=25788&r=needtrace
Try newer version:          http://bugs.php.net/fix.php?id=25788&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=25788&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=25788&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=25788&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=25788&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=25788&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=25788&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=25788&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=25788&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=25788&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=25788&r=float

Reply via email to