0008136: Some <pre></pre> texts may cause php crash without error message

ID	Project	Category	View Status	Date Submitted	Last Update
0008136	mantisbt	bugtracker	public	2007-07-09 11:03	2008-04-19 04:10

Reporter	polzin	Assigned To	grangeway
Priority	normal	Severity	major	Reproducibility	sometimes
Status	closed	Resolution	fixed
Product Version	1.0.5
Fixed in Version	1.2.0a1

Summary	0008136: Some texts may cause php crash without error message
Description	I had the problem that after some user added a note, all bugnotes where not displayed on the page. I tracked down the problem to an regexp overflow that can be avoided by using "/<pre[^>]?>([^<]\|[<])?<\/pre>/" instead of "/<pre[^>]?>(.\|\n)*?<\/pre>/" in core/string_api.php/strings_nl2br. I tried it on different mantis installations and could reproduce it only in one. The questionable pre-text is added in "Steps to Reproduce".
Steps To Reproduce	Â¡Ã•m Â¡{yÂ¡{yÂ¡{yÂ¡{y ( H xHz dHzhHz@Hz Ã´/z@Hz Â¼Ã±Ã¬Â¿CÃ¦m Ã 6D xHz@Hz @HzpÃ±Ã¬Â¿Ã£{y xHz DÃšm @Hz Â¸Â¬
Tags	No tags attached.

parent of	0008661	closed	giallu	Possible crash condition leading to blank or incomplete page
related to	0006666	closed	grangeway	SIGSEGV in pcre_config

grangeway 2007-12-08 19:42 reporter ~0016406	Hello, I believe that this is fixed by the commit at http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/trunk/mantisbt/core/string_api.php?r1=4806&r2=4819 The fix will be in 1.2.X releases and also backported to 1.1 Any further problems or comments please let us know Thanks Paul