Bug 24395

Summary: CVE-2010-3710: Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data
Product: Sisyphus Reporter: Vladimir Lettiev <crux>
Component: php5Assignee: Anton Farygin <rider>
Status: CLOSED FIXED QA Contact: qa-sisyphus
Severity: blocker    
Priority: P3 CC: rider
Version: unstableKeywords: security
Hardware: all   
OS: Linux   
URL: http://bugs.php.net/bug.php?id=52929

Description Vladimir Lettiev 2010-10-23 10:37:36 MSD
There is an error in php_filter_validate_email() function, when validating email addresses, that may cause segfault and crash via long input string
Comment 1 Anton Farygin 2010-10-23 11:54:51 MSD
Спасибо, сейчас исправим.
Comment 2 Repository Robot 2010-10-30 15:30:28 MSD
php5-5.3.3.20100722-alt3 -> sisyphus:

* Sat Oct 23 2010 Anton Farygin <rider@altlinux> 5.3.3.20100722-alt3
- fixed default sendmail_path value
- fixed segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data, CVE-2010-3710 (closes: #24395)