[php-maint] Bug#527560: php5: double free() error in latest etch security update

[sean finney]

Package: php5
Version: 5.2.0+dfsg-8+etch15
Severity: important

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

as reported in <b8c1ff272e7661ce4ab612b601f3b606.squirrel at wm.kinkhorst.nl>:

> It seems that there were some side effects. Since the upgrade we've PHP
> crashes with:
> *** glibc detected *** double free or corruption (fasttop): 0x08718200
> ***
> 
> The crash occurs inside the extractTo function, please tell me if you
> need any additional information.

and i can confirm the problem, which only seems to occur with certain
types of zipfiles/error conditions.


	sean

- -- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.29-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages php5 depends on:
ii  libapache2-mod-php5       5.2.9.dfsg.1-2 server-side, HTML-embedded scripti
ii  php5-common               5.2.9.dfsg.1-2 Common files for packages built fr

php5 recommends no packages.

php5 suggests no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFKA9U6ynjLPm522B0RAmAjAJkBMpDia23FhpVD/+rSiZXC26Q0awCfeHjn
853yjG8TOjCXuwE7vQDBeEs=
=uB1k
-----END PGP SIGNATURE-----