ID:               28728
 Updated by:       [EMAIL PROTECTED]
 Reported By:      steveh at brendata dot co dot uk
-Status:           Open
+Status:           Feedback
 Bug Type:         DBX related
 Operating System: linux 2.4.22
 PHP Version:      4.3.4
 New Comment:

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip




Previous Comments:
------------------------------------------------------------------------

[2004-06-10 15:51:22] steveh at brendata dot co dot uk

Sorry, the previous comment was (probably) completely wrong, it only
appeared to work as I had made a typo in the password and therefore it
never connected to the database.

Still investigating.

------------------------------------------------------------------------

[2004-06-10 15:38:24] steveh at brendata dot co dot uk

Ok, it's related to the size of the column name, probably a buffer
overflow, reducing the length of a generic prefix has removed the
problem for now.

------------------------------------------------------------------------

[2004-06-10 15:29:42] steveh at brendata dot co dot uk

Description:
------------
I'm still working out the circumstances and removing code to prove what
is causing the issue, but at present, both the apache module and the
cli php are core dumping with the following backtrace.

Reproduce code:
---------------
This will follow when I find out what's causing the issue.

Expected result:
----------------
No core dump?

Actual result:
--------------
(gdb) bt
#0  0x082066d4 in _zval_ptr_dtor (zval_ptr=0x84e6ef8,
__zend_filename=0x823f9c0 "/usr/src/php-4.3.4/ext/dbx/dbx_sybasect.c",

    __zend_lineno=198) at
/usr/src/php-4.3.4/Zend/zend_execute_API.c:289
#1  0x080a4988 in dbx_sybasect_getcolumnname (rv=0xbfff9554,
result_handle=0xbfff958c, column_index=0, ht=2, 
    return_value=0x8523434, this_ptr=0x0, return_value_used=1) at
/usr/src/php-4.3.4/ext/dbx/dbx_sybasect.c:198
#2  0x0809e751 in switch_dbx_getcolumnname (rv=0xbfff9554,
result_handle=0xbfff958c, column_index=0, ht=2, return_value=0x8523434,

    this_ptr=0x0, return_value_used=1, dbx_module=0x84e5a28) at
/usr/src/php-4.3.4/ext/dbx/dbx.c:835
#3  0x0809cd3f in zif_dbx_query (ht=2, return_value=0x8523434,
this_ptr=0x0, return_value_used=1)
    at /usr/src/php-4.3.4/ext/dbx/dbx.c:489
#4  0x082243c3 in execute (op_array=0x85070f0) at
/usr/src/php-4.3.4/Zend/zend_execute.c:1616
#5  0x082245f6 in execute (op_array=0x851ab00) at
/usr/src/php-4.3.4/Zend/zend_execute.c:1660
#6  0x082245f6 in execute (op_array=0x851a470) at
/usr/src/php-4.3.4/Zend/zend_execute.c:1660
#7  0x082245f6 in execute (op_array=0x84c93e4) at
/usr/src/php-4.3.4/Zend/zend_execute.c:1660
#8  0x08212038 in zend_execute_scripts (type=8, retval=0x0,
file_count=3) at /usr/src/php-4.3.4/Zend/zend.c:884
#9  0x081d8c56 in php_execute_script (primary_file=0xbffffb20) at
/usr/src/php-4.3.4/main/main.c:1729
#10 0x082341e2 in main (argc=2, argv=0xbffffbc4) at
/usr/src/php-4.3.4/sapi/cli/php_cli.c:819
#11 0x4039b657 in __libc_start_main (main=0x8233690 <main>, argc=2,
ubp_av=0xbffffbc4, init=0x8078db4 <_init>, 
    fini=0x8239d40 <_fini>, rtld_fini=0x4000dc54 <_dl_fini>,
stack_end=0xbffffbbc) at ../sysdeps/generic/libc-start.c:129
(gdb


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=28728&edit=1

Reply via email to