[wp-trac] [WordPress Trac] #29557: PHP Crash on Large Block of HTML

[WordPress Trac]

#29557: PHP Crash on Large Block of HTML
-----------------------------------+--------------------
 Reporter:  MrBobDobolina          |       Owner:
     Type:  defect (bug)           |      Status:  new
 Priority:  normal                 |   Milestone:  4.0.1
Component:  Formatting             |     Version:  4.0
 Severity:  major                  |  Resolution:
 Keywords:  wptexturize has-patch  |     Focuses:
-----------------------------------+--------------------

Comment (by ArsenyKovalchuk):

 Replying to [comment:25 ArsenyKovalchuk]:
 > Hi guys. I've faced with the same issue on the line
 >
 > {{{
 > $textarr = preg_split( $regex, $text, -1, PREG_SPLIT_DELIM_CAPTURE |
 PREG_SPLIT_NO_EMPTY );
 > }}}
 >
 > I attached a file Content1.txt. This is a dump of the $text variable
 just before preg_split. OS Windows 7 Pro, PHP version is 5.3.13, PCRE
 Library Version    8.12 2011-01-15, pcre.backtrack_limit = 1000000.
 >
 > I applied the patch miqro-29557.4.patch, it helped to pass preg_split,
 but it crashes somewhere after. I'll try to locate the line. Could you
 please take a look as well. Thanks.

 Now it crashes in the loop on the first line of the text (line 250 of the
 pathced code)
 {{{
 } elseif ( '[' === $first && 1 === preg_match( '/^\[\[?\/?' . $tagregexp .
 '(?:[^\[\]<>]|<[^>]+>)*+\]\]?$/', $curl ) ) {
 }}}

 I get following regexp code which crashes

 {{{
 preg_match('/^\[\[?\/?(?:embed|wp_caption|caption|gallery|playlist|audio|video|layerslider|adrotate|acf|go_pricing|go_pricing_youtube|go_pricing_vimeo|go_pricing_screenr|go_pricing_dailymotion|go_pricing_metacafe|go_pricing_html5_video|go_pricing_soundcloud|go_pricing_mixcloud|go_pricing_beatport|go_pricing_audio|go_pricing_map|go_pricing_custom_iframe|free_adv_form|ahm\-pricing\-table|rev_slider|page_polls|poll|ratings|p2p_connected|p2p_related|contact\-form\-7|contact\-form|vc_container_anchor|dt_cell|dt_box|dt_gap|dt_divider|dt_stripe|dt_fancy_image|dt_list_item|dt_list|dt_button|dt_tooltip|dt_highlight|dt_code|dt_code_final|dt_tab|dt_tabs|dt_item|dt_accordion|dt_toggle|dt_quote|dt_call_to_action|dt_teaser|dt_banner|dt_benefits|dt_benefit|dt_progress_bars|dt_progress_bar|dt_contact_form|dt_social_icons|dt_social_icon|dt_map|dt_blog_posts_small|dt_blog_posts|dt_portfolio|dt_portfolio_jgrid|dt_portfolio_slider|dt_small_photos|dt_slideshow|dt_team|dt_testimonials|dt_logos|dt_text|dt
 _vc_list_item|dt_vc_list|dt_benefits_vc|dt_fancy_video_vc|dt_fancy_title|dt_fancy_separator|types|vc_row|vc_row_inner|vc_column|vc_column_text|vc_separator|vc_text_separator|vc_message|vc_facebook|vc_tweetmeme|vc_googleplus|vc_pinterest|vc_toggle|vc_single_image|vc_tabs|vc_tour|vc_tab|vc_accordion|vc_accordion_tab|vc_carousel|vc_posts_slider|vc_widget_sidebar|vc_button2|vc_cta_button2|vc_video|vc_gmaps|vc_raw_html|vc_raw_js|vc_flickr|vc_progress_bar|vc_pie|layerslider_vc|rev_slider_vc|vc_column_inner)(?![\w-])(?:[^\[\]<>]|<[^>]+>)*+\]\]?$/','[vc_row
 margin_top="35" margin_bottom="45" padding_left="40" padding_right="40"
 bg_position="top" bg_repeat="no-repeat" bg_cover="false"
 bg_attachment="false" padding_top="40" padding_bottom="40"
 parallax_speed="0.1"][vc_column width="3/4"][dt_benefits_vc columns="4"
 style="1" dividers="true" image_background="true" target_blank="false"
 header_size="h5" content_size="normal" number="4" orderby="date"
 order="desc" animation="scale" category="no-captions,no-buttons"
 image_background_color="#ffffff"]')
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29557#comment:27>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform