Re: Re: CVE request (PHP 5.3.x getSymbol() DoS; CERT VU#479900)

[Tomas Hoger <thoger () redhat com>]

On Wed, 8 Dec 2010 14:27:22 +0000 (UTC) Maksymilian Arciemowicz wrote:

> my mistake, not setSybol() but getLocale()
>
> $nx=new IntlDateFormatter("pl", IntlDateFormatter::FULL,
> IntlDateFormatter::FULL);
> $nx->getLocale(1);

1 is one of the (two?) values on which this does not crash ;).  Yeah,
this does strlen(NULL) crash otherwise.

-- 
Tomas Hoger / Red Hat Security Response Team