On Tue, 15 Jul 2008, Issaana@??? wrote:
> I could reproduce this problem with the following environment.
>
> OS : Ubuntu 8.04
> Compiler : gcc 4.2.3
> PCRE version : 7.7 (2008-05-07)
Aha! That's progress. It does not show up on my Gentoo Linux box.
> * using the following small C code. (The output result is "ret=0, namecount=1")
On my box, the result is "ret=0, namecount=0".
> So I think that this problem does not depend on the environment.
Yes, it does, because I cannot reproduce it! But it does seem not to be
specifically Windows-related.
> Is the following related to this problem?
>
> [Pcre-svn] [360] code/trunk: Fix CVE-2008-2371 ( outer level option with
> alternatives caused crash).
I suppose the only way to test that would be to compile a versions of
PCRE with and without the patch, and check. If you are using an
unpatched PCRE 7.7, it does not have that fix on it, however.
I can't do this as I don't ever see the problem (my gcc is 4.1.2).
Philip
--
Philip Hazel
