[php-maint] Bug#483461: php5-cli: use_embedded_timezonedb.patch php5 patch causes segmentation faults when tzdata not installed

fatz at fatkids.com fatz at fatkids.com
Wed May 28 20:40:49 UTC 2008

Package: php5-cli
Version: 5.2.6-1
Severity: important

When /usr/share/zoneinfo does not exist, this patch attempts to free() on
unallocated memory, causing PHP to cease functioning.  The problem comes
314                     free(ents);
Earlier, ents set via:
110               count = php_scandir(name, &ents, index_filter,

Name is typically "/usr/share/zoneinfo".  If the directory
/usr/share/zoneinfo does not exist, ents is set to -1, but line 314 still
attempts to free it, causing the problem.
tzdata does not appear to be a requirement for php5, so there is no
guarantee that this directory would exist.

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages php5-cli depends on:
ii  libbz2-1.0             1.0.5-0.1         high-quality block-sorting file co
ii  libc6                  2.7-11            GNU C Library: Shared libraries
ii  libcomerr2             1.40.8-2          common error description library
ii  libdb4.6               4.6.21-8          Berkeley v4.6 Database Libraries [
ii  libkrb53               1.6.dfsg.3-2      MIT Kerberos runtime libraries
ii  libmagic1              4.17-5etch3       File type determination library us
ii  libncurses5            5.6+20080503-1    Shared libraries for terminal hand
ii  libpcre3               7.6-2             Perl 5 Compatible Regular Expressi
ii  libssl0.9.8            0.9.8g-10         SSL shared libraries
ii  libxml2                2.6.32.dfsg-2     GNOME XML library
ii  mime-support           3.39-1            MIME files 'mime.types' & 'mailcap
ii  php5-common            5.2.6-1           Common files for packages built fr
ii  ucf                    2.0020            Update Configuration File: preserv
ii  zlib1g                 1: compression library - runtime

php5-cli recommends no packages.

-- no debconf information

More information about the pkg-php-maint mailing list