Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:91252
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain lerdorf.com designates 209.85.192.179 as permitted sender)
To: Christian Schneider <cschneid@cschneid.com>,
 PHP internals <internals@lists.php.net>
References: <79F03701-9083-439B-A9D1-43E24C99CF13@cschneid.com>
Message-ID: <56C49F95.7020403@lerdorf.com>
Date: Wed, 17 Feb 2016 08:28:05 -0800
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101
 Thunderbird/38.5.1
MIME-Version: 1.0
In-Reply-To: <79F03701-9083-439B-A9D1-43E24C99CF13@cschneid.com>
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="kvniqX9LLxOG8BelLmePbIBLhiXKojoSM"
Subject: Re: [PHP-DEV] PCRE jit bug with UTF-8 and lookbehind assertion
From: rasmus@lerdorf.com (Rasmus Lerdorf)

--kvniqX9LLxOG8BelLmePbIBLhiXKojoSM
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 02/17/2016 05:06 AM, Christian Schneider wrote:
> Hi there,
> we just ran into a version of the bug "JIT bug with lookbehind assertio=
n":
> 	https://bugs.exim.org/show_bug.cgi?id=3D1189
>=20
> To reproduce it you can use
> 	php -n -r 'ini_set("pcre.jit", 0); echo preg_replace("/\b(11|21|41)\b/=
u", "z", "x=C2=B011\n");'
> vs.
> 	php -n -r 'ini_set("pcre.jit", 1); echo preg_replace("/\b(11|21|41)\b/=
u", "z", "x=C2=B011\n");'
>=20
> Since the PCRE bug report dates from 2011-12-27 and is still marked NEW=
 I wonder if it would be safer for PHP to disable pcre.jit in the recomme=
nded php.ini configuration files.
>=20
> Also: Does anyone know who might be able/willing to look at the upstrea=
m bug?
>=20
> Regards,
> - Chris

Just replying here since many people probably missed this since gmail
classified it as spam.

-Rasmus


--kvniqX9LLxOG8BelLmePbIBLhiXKojoSM
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iEYEARECAAYFAlbEn5sACgkQlxayKTuqOuCGxwCfUOZYsbmsrFfi11AO7O99Xy0L
7ikAniV2YqBLwYrlDsM9AH4jkFsg6wYF
=8+N8
-----END PGP SIGNATURE-----

--kvniqX9LLxOG8BelLmePbIBLhiXKojoSM--