Thanks for reporting this bug and coming up with a nice, small test case to reproduce it. I've confirmed that it's an issue for 8.04 LTS and 6.06 LTS and I've pulled a patch from upstream's subversion (http://svn.php.net/viewvc?view=revision&revision=267423) that fixes the test case locally (attached).
I've uploaded a test package for 8.04 LTS based on this fix (and the one for bug 774452) to the security-proposed ppa at https://launchpad.net /~ubuntu-security-proposed/+archive/ppa/. I'd appreciate it someone could confirm that the package fixes it for the more complex situation code that triggered it initially. Thanks for your patience and my apologies for introducing this regression. ** Patch added: "php5-CVE-2010-4697-regression.patch" https://bugs.launchpad.net/ubuntu/+source/php5/+bug/776642/+attachment/2111442/+files/php5-CVE-2010-4697-regression.patch ** Changed in: php5 (Ubuntu) Status: New => In Progress ** Changed in: php5 (Ubuntu) Importance: Undecided => High ** Changed in: php5 (Ubuntu) Assignee: (unassigned) => Steve Beattie (sbeattie) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/776642 Title: segfaults from 5.2.4-2ubuntu5.15 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs