[PHP-DEV] PHP 4.0 Bug #2105: Crash in escapeshellcmd with an empty string From: christophe.massiot <email protected>
Date: 08/18/99

From: christophe.massiot <email protected>
Operating system: Linux 2.0.36/Debian slink
PHP version: 4.0 Latest CVS (18/08/1999)
PHP Bug Type: Reproduceable crash
Bug description: Crash in escapeshellcmd with an empty string

The following script :

<?
$toto = escapeshellcmd(substr("", 0, 38));
?>

crashes with the following backtrace :

Program received signal SIGSEGV, Segmentation fault.
0x808240b in _php3_escapeshellcmd (str=0x0) at exec.c:330
330 l = strlen(str);
(gdb) bt
#0 0x808240b in _php3_escapeshellcmd (str=0x0) at exec.c:330
#1 0x80824fb in php3_escapeshellcmd (ht=1, return_value=0xbffff788,
    list=0x80d90e0, plist=0x80d910c, this_ptr=0x0) at exec.c:355
#2 0x807407d in execute (op_array=0x80ee508) at zend_execute.c:1403
#3 0x8056dcc in php_execute_script (primary_file=0xbffff948) at main.c:1133
#4 0x805c6a1 in main (argc=2, argv=0xbffff9b8) at cgi_main.c:448 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>