: Bug #26947 :: Crash by using DomDocument::getElementById()
| Bug #26947 | Crash by using DomDocument::getElementById() | ||||
|---|---|---|---|---|---|
| Submitted: | 2004-01-17 12:57 UTC | Modified: | 2004-01-18 21:36 UTC | ||
| From: | olivier dot bichler at laposte dot net | Assigned: | |||
| Status: | Closed | Package: | DOM XML related | ||
| PHP Version: | 5.0.0b3 (beta3) | OS: | * | ||
| Private report: | No | CVE-ID: | None | ||
[2004-01-17 12:57 UTC] olivier dot bichler at laposte dot net
Description:
------------
PHP crash by using the DOM function getElementById() (PHP kill the Apache server process on Windows, with Apache v1.3.27 and v2.0.48).
Reproduce code:
---------------
<?php
$dom = new DomDocument;
$dom -> load('essai.xml');
if ($dom -> validate()) {
$menu = new DomDocument;
$menu = $dom -> getElementById('a');
echo $menu -> firstChild -> data;
}
?>
essai.xml :
-----------
<?xml version="1.0"?>
<!DOCTYPE essai [
<!ELEMENT essai (truc+)>
<!ELEMENT truc (#PCDATA)>
<!ATTLIST truc
id ID #REQUIRED>
]>
<essai>
<truc id="a">1</truc>
</essai>
Expected result:
----------------
1
Actual result:
--------------
Nothing, PHP and the server crash...
There is the same result with an external doctype.
When I call getElementById(id) with an id who doesn't exist in the XML file, there is no crash.
Patches
Pull Requests
History
AllCommentsChangesGit/SVN commits
[2004-01-18 05:13 UTC] chregu@php.net
[2004-01-18 07:52 UTC] chregu@php.net