one in socket_select

diff --git a/TODO_SEGFAULTS b/TODO_SEGFAULTS
index d3d9eb3f80cb4fcd8cc8b60139abec083fdc1caf..888361a0e9562c3121c63779299a16b4f6e0ffeb 100644 (file)
--- a/TODO_SEGFAULTS
+++ b/TODO_SEGFAULTS
@@ -25,6 +25,7 @@ Open:
     the dbase extension         (1)
     mb_strcut('', 2147483647);  (2)
     chunk_split                 (3)
+    socket_select               (4)
        
 (1) heap corruption, mostly visible in malloc-related calls.  Whether you see 
     this or not might depend on your libc/compiler.  Hard to track down,
@@ -53,6 +54,7 @@ X
 
 (3) integer overflow in php_chunk_split
 
+(4) heap corruption, dies in efree()/execute()
 
 Methodology