setSymbol crash on bogus $attr values

Bug #53512	NumberFormatter::setSymbol crash on bogus $attr values
Submitted:	2010-12-09 22:12 UTC	Modified:	2010-12-10 01:51 UTC
From:	thoger at redhat dot com	Assigned:	felipe (profile)
Status:	Closed	Package:	Reproducible crash
PHP Version:	5.3.3	OS:	Linux
Private report:	No	CVE-ID:	None

[2010-12-09 22:12 UTC] thoger at redhat dot com

Description:
------------
SVN commit r305571:
  http://svn.php.net/viewvc?view=revision&revision=305571

fixed a crash in NumberFormatter::getSymbol when certain invalid values are passed to it as $attr argument.  Similar issue affects setSymbol too and does not seem to be addressed in the above above commit.  Underlying ICU issue is similar.

Test script:
---------------
numfmt_set_symbol(numfmt_create("en", NumberFormatter::PATTERN_DECIMAL), 2147483648, "");

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

[2010-12-10 01:51 UTC] felipe@php.net

-Status: Open +Status: Closed -Assigned To: +Assigned To: felipe

[2010-12-10 01:51 UTC] felipe@php.net

This bug has been fixed in SVN.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.