Repository navigation
SEGV in bindtextdomain #17400
Description
Description
The following code:
<?php
$utf16_first_le = pack("H*", "00d800dc");
$utf16le_char_bad = pack("H*", "00dc00dc");
bindtextdomain($utf16le_char_bad,$utf16_first_le);Resulted in this output:
/home/phpfuzz/WorkSpace/flowfusion/php-src/ext/gettext/gettext.c:216:2: runtime error: null pointer passed as argument 1, which is declared to never be null
/usr/include/string.h:408:33: note: nonnull attribute specified here
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /home/phpfuzz/WorkSpace/flowfusion/php-src/ext/gettext/gettext.c:216:2
PHP Version
nightly
Operating System
No response
Reacted by Christoph M. Becker
Activity
Fix phpGH-17400: bindtextdomain segfault with UTF-16 domain value.
Fix GH-17400: bindtextdomain segfault with UTF-16 domain value.