[PHP-DEV] Bug #13107 Updated: php_ini.c:197 coding bug From: rasmus <email protected>
Date: 09/03/01

ID: 13107
Updated by: rasmus
Reported By: nick <email protected>
Old Status: Open
Status: Closed
Bug Type: Scripting Engine problem
Operating System: All
PHP Version: 4.0.6
New Comment:

Fixed - good catch

Previous Comments:
------------------------------------------------------------------------

[2001-09-03 08:01:14] nick <email protected>

Probably should be sizeof(char*) rather than sizeof(zval) here as zend extension paths are stored as a strings rather than zvals, as below. As a result the stack is blown on the resultant memcpy in the llist code.

zend_llist_init(&extension_lists.engine, sizeof(zval), (llist_dtor_func_t) free_estring, 1);
/*...*/
char *extension_name = estrndup(Z_STRVAL_P(arg2), Z_STRLEN_P(arg2));
                                        
zend_llist_add_element(&extension_lists.engine, &extension_name);

------------------------------------------------------------------------

Edit this bug report at http://bugs.php.net/?id=13107&edit=1 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>