Bug 1305499 - php: Loading zend_extension twice can lead to segfault in zend_interned_strings_dtor
Summary: php: Loading zend_extension twice can lead to segfault in zend_interned_strin...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 1305564
TreeView+ depends on / blocked
 
Reported: 2016-02-08 12:41 UTC by Adam Mariš
Modified: 2019-09-29 13:43 UTC (History)
13 users (show)

Fixed In Version: php 5.6.18
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-02-11 07:54:42 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Adam Mariš 2016-02-08 12:41:33 UTC 
It was reported that no check is performed when loading zend_extension twice, which can cause segmentation fault in zend_interned_strings_dtor.

Upstream bug:

https://bugs.php.net/bug.php?id=71089

Upstream patch:

https://git.php.net/?p=php-src.git;a=commit;h=410eacc1a9b50ec3cb6c5fc0ff252516d0c0a4f1
Comment 1 Remi Collet 2016-02-08 13:37:37 UTC 
Sorry, but I don't think this is a security issue, as it only occurs in case of a configuration mistake.
Comment 2 Adam Mariš 2016-02-08 15:13:53 UTC 
Created php tracking bugs for this issue:

Affects: fedora-all [bug 1305565]
Comment 3 Tomas Hoger 2016-02-11 07:54:42 UTC 
(In reply to Remi Collet from comment #1)
> Sorry, but I don't think this is a security issue, as it only occurs in case
> of a configuration mistake.

Agree!
Note You need to log in before you can comment on or make changes to this bug.