Apache/PHP5.3.1 causes stack overflow when executing preg_match_all |
|
| BugsAlert Home > Apache/PHP5.3.1 causes stack overflow when executing preg_match_all | |
|
Description:
------------
I have a regular expression that would not crash APACHE/PHP in PHP 5.2.8 but now that I have upgraded to PHP 5.3.1 it is unable to execute the code.
Clearly from the dump there is a stack overflow. My reason for pointing toward a bug is that 1) it executed fine in 5.2.8 and 2) It only fails on certain strings.
Some other notes:
1) It executes and completes fine if it is run command line.
2) If I set the PCRE.backtrack_limit = 1100 it will complete fine.
Certainly neither of these options are resolutions to my problem as I run a webserver using APACHE and I need the backtrack_limit to be much higher than 1100 bytes.
Reproduce code:
---------------
$Pattern = "/\b(?!((yellow mellow)|(help you)|(uh? -? ?huh)|(that('s| is) (ok|fine|back))))((?
|
|
|
Tags: apache php5.3.1 stack overflow executing preg match |
|
Related Items |
|
|
Mandriva: Subject: [Security Announce] [ MDVSA-2008:183 ] opensc
|
|
|
CVE-2010-0513 (mac_os_x, mac_os_x_server)
|
|
|
TROJ_STRAT.JD
|
|
|
beContent "id" SQL Injection Vulnerability
|
|
|
DFF PHP Framework API "DFF_config[dir_include]" File Inclusion Vulnerabilities
|
|
|
FrSIRT - CenterIM URL Processing Remote Command Injection Vulnerability
|
|
|
FrSIRT - Redhat Security Update Fixes Evolution Format String Vulnerability
|
|
