Hi Jared,

It's true, array_walk_recursive() used the php_array_walk() and it can cause some serious problem within the stack. The way to fix this bug is to prevent the "out-of stack limit". I'll send a patch if i can find a way to fix correctly this bug.

-michael

----- Original Message ----- From: "Jared Williams" <[EMAIL PROTECTED]> To: "'Michael Vergoz'" <[EMAIL PROTECTED]>; "'Wez Furlong'" <[EMAIL PROTECTED]>; "'Ilia Alshanetsky'" <[EMAIL PROTECTED]>
Cc: "'Nuno Lopes'" <[EMAIL PROTECTED]>; "'PHPdev'" <internals@lists.php.net>
Sent: Friday, February 24, 2006 4:55 PM
Subject: RE: [PHP-DEV] recover from a segfault



The problem is that setrlimit() need privilege to expand the
process stack.
I don't think it's a good idea to use this system call to fix
the too-high-function-stack bug.
There is no really way to fix correctly this bug.
However I think we should re-examined the execution flow of
PECL functions.

How about core functions too.. Using array_walk_recursive to undo magic_quotes creates a stack smashing exploit.

Jared

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php



--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to