Zend_Validate_Hostname: disallowed Unicode code point

[kerwitz]

Zend Version: 1.12 (also tested on 1.12.5)
PHP Version: 5.4.4-14+deb7u8 and upwards
Related to: http://www.framework.zend.com/issues/browse/ZF-12270

Description:

The hostname validator fails on line 615:

$status = @preg_match($regexChar, $domainPart);

with error:

PHP-Error E_WARNING:
preg_match(): Compilation failed: disallowed Unicode code point (>= 0xd800 && <= 0xdfff) at offset 9
on line 615

when trying to validate hostnames with three letter tlds (example input: test.com).

Workaround (Line 615):

- $status = @preg_match($regexChar, $domainPart);
+ // [fix] In PHP 5.4.4+ an empty $domainPart will
+ //       cause preg_match to throw a "disallowed
+ //       Unicode code point" error.
+ if ( empty( $domainPart ) ) continue;
+ // [/fix]
+ $status = @preg_match($regexChar, $domainPart);

[froschdesign]

ping @mhujer

[mhujer]

ok :-)

[mhujer]

@froschdesign Seems that it is not failing on travis so it has been probably fixed in newer PCRE

[froschdesign]

Seems that it is not failing on travis so it has been probably fixed in newer PCRE

So I will close this issue.

[froschdesign]

@mhujer
Thanks!

[marc-mabe]

Why this bug is closed? ZF1 should be compatible down to PHP-5.3.?. This bug exists with PHP-5.4.34 (default on current debian-7.7) and I don't know about some ZF restrictions to PCRE version.

Please reopen

[mhujer]

@marc-mabe I couldn't confirm the issue (write a failing test). Can you please run the Zend/Validate/HostnameTest.php test and paste the output here?

[marc-mabe]

@mhujer please remove the error suppression operator on preg_match in Zend/Validate/Hostname.php on line 1487

[froschdesign]

@marc-mabe
You are right!
Any ideas for a solution?

(Btw. Thanks for the feedback.)

[marc-mabe]

With this operator all tests passes. I'm unsure what's wrong but I get the message sometimes on production servers and can't see currently the input domain.
So I don't know if the validating result is wrong but the error message and the suppression operator have to go

[mhujer]

@marc-mabe It was related to some IDN domain - therefore the randomness (I suppose not many people use e-mail on IDN .com domain - it must cause them problems all over the internet)

see the #472 for possible fix