[php-maint] Bug#573573: php5-xmlrpc: xmlrpc_decode_request generates segmentation fault on incorrect but valid xml requests
Auke van Slooten
auke at muze.nl
Fri Mar 12 15:47:24 UTC 2010
Package: php5-xmlrpc
Version: 5.3.1-4
Severity: important
When decoding a xml-rpc request which is valid xml but doesn't have the
expected tags, xmlrpc_decode_request generates a segmentation fault. The
code below reproduces this:
<?php
$req = '<?xml version="1.0"?>
<methodCall>
</methodCall>';
$result = xmlrpc_decode_request( $req, $frop );
?>
xmlrpc_decode does work and simply returns NULL.
-- System Information:
Debian Release: 5.0.4
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages php5-xmlrpc depends on:
ii libapache2-mod-php5 [php 5.3.1-4 server-side, HTML-embedded scripti
ii libc6 2.10.2-5 Embedded GNU C Library: Shared lib
ii libxml2 2.7.6.dfsg-2+b1 GNOME XML library
ii php5-cli [phpapi-2009062 5.3.1-4 command-line interpreter for the p
ii php5-common 5.3.1-4 Common files for packages built fr
php5-xmlrpc recommends no packages.
php5-xmlrpc suggests no packages.
-- no debconf information
More information about the pkg-php-maint
mailing list