[PHP-DEV] Bug #970: get_browser() dumps core From: sklar <email protected>
Date: 12/03/98

From: sklar <email protected>
Operating system: Linux 2.0.35
PHP version: 3.0.5
PHP Bug Type: Reproduceable crash
Bug description: get_browser() dumps core

PHP 3.0.5 apache module + Apache 1.3.3 + Linux 2.0.35

<?php $browser = get_browser() ?> dumps core every time.

I've tried this both with Zeev's browscap file and the one from cyscape.

A backtrace:

(gdb) run -X -d ~/apache-test -f conf
Starting program: /home/sklar/apache-test/apache -X -d ~/apache-test -f conf

Program received signal SIGSEGV, Segmentation fault.
0x0 in ?? ()
(gdb) bt
#0 0x0 in ?? ()
#1 0x80635db in _php3_hash_find (ht=0x812d9a4,
    arKey=0x8157778 "Mozilla/4.5 [en] (Win95; I)", nKeyLength=28,
    pData=0xbfffebd4) at php3_hash.c:836
#2 0x8085621 in php3_get_browser (ht=0x81585a0, return_value=0x811b678,
    list=0x812da48, plist=0x812da1c) at functions/browscap.c:104
#3 0x808e544 in phpparse () at control_structures_inline.h:930
#4 0x806237a in php3_parse (yyin=0x81520f0) at main.c:1465
#5 0x8062618 in apache_php3_module_main (r=0x814f87c, fd=20,
    display_source_mode=0, preprocessed=0) at main.c:1845
#6 0x805fc48 in send_php3 ()
#7 0x805fcac in send_parsed_php3 ()
#8 0x8097deb in ap_invoke_handler ()
#9 0x80a9fa9 in process_request_internal ()
#10 0x80aa008 in ap_process_request ()
#11 0x80a2379 in child_main ()
#12 0x80a2504 in make_child ()
#13 0x80a2667 in startup_children ()
#14 0x80a2c5c in standalone_main ()
#15 0x80a342f in main ()
(gdb) up
#1 0x80635db in _php3_hash_find (ht=0x812d9a4,
    arKey=0x8157778 "Mozilla/4.5 [en] (Win95; I)", nKeyLength=28,
    pData=0xbfffebd4) at php3_hash.c:836
836 h = ht->pHashFunction(arKey, nKeyLength);
(gdb) print *ht
$1 = {nTableSize = 0, nHashSizeIndex = 0, nNumOfElements = 0,
  nNextFreeElement = 0, pHashFunction = 0, pInternalPointer = 0x0,
  pListHead = 0x0, pListTail = 0x0, arBuckets = 0x0, pDestructor = 0,
  persistent = 0 '\000'} 

--
PHP Development Mailing List   http://www.php.net/
To unsubscribe send an empty message to php-dev-unsubscribe <email protected>
For help: php-dev-help <email protected>