Bug 24395 - CVE-2010-3710: Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data
Summary: CVE-2010-3710: Segfault in filter_var with FILTER_VALIDATE_EMAIL with large a...
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: php5 (show other bugs)
Version: unstable
Hardware: all Linux
: P3 blocker
Assignee: Anton Farygin
QA Contact: qa-sisyphus
URL: http://bugs.php.net/bug.php?id=52929
Keywords: security
Depends on:
Blocks:
 
Reported: 2010-10-23 10:37 MSD by Vladimir Lettiev
Modified: 2010-10-30 15:30 MSD (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Vladimir Lettiev 2010-10-23 10:37:36 MSD 
There is an error in php_filter_validate_email() function, when validating email addresses, that may cause segfault and crash via long input string
Comment 1 Anton Farygin 2010-10-23 11:54:51 MSD 
Спасибо, сейчас исправим.
Comment 2 Repository Robot 2010-10-30 15:30:28 MSD 
php5-5.3.3.20100722-alt3 -> sisyphus:

* Sat Oct 23 2010 Anton Farygin <rider@altlinux> 5.3.3.20100722-alt3
- fixed default sendmail_path value
- fixed segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data, CVE-2010-3710 (closes: #24395)