Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:566
Return-Path: <sascha@schumann.cx>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 26638 invoked from network); 1 Apr 2003 10:44:12 -0000
Received: from unknown (HELO milton.schell.de) (217.160.72.35)
  by pb1.pair.com with SMTP; 1 Apr 2003 10:44:12 -0000
Received: (qmail 1729 invoked by uid 501); 1 Apr 2003 10:44:11 -0000
Received: from unknown (HELO eco.foo) (80.143.27.50)
  by kdserv.de with SMTP; 1 Apr 2003 10:44:11 -0000
Received: from localhost (localhost [127.0.0.1])
	by eco.foo (Postfix) with ESMTP id 469593767A
	for <internals@lists.php.net>; Tue,  1 Apr 2003 12:44:09 +0200 (CEST)
Date: Tue, 1 Apr 2003 12:44:09 +0200 (CEST)
X-X-Sender: sas@eco.foo
To: internals@lists.php.net
Message-ID: <Pine.LNX.4.53.0304011226570.1146@eco.foo>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: further segfaults in php
From: sascha@schumann.cx (Sascha Schumann)

    Here are some further functions which directly or indirectly
    cause a segfault.  In some cases, the prior function
    invocation screwed up the engine internals, so that the next
    function call resulted in a segfault.

    How to reproduce:

    1. wget http://schumann.cx/do_crash.txt
    2. echo funcname | php do_crash.txt

    Function list

    ob_start();

    socket_iovec_alloc($maxn,$maxn,$maxn);

    exif_thumbnail('',$maxs,$maxn);

    mb_ereg('',$maxs,$maxn);

    mb_ereg_match($maxs);

    mb_eregi('',$maxs,$maxn);

    mb_split($maxn,$maxn,$maxn);

    - Sascha