473,699 Members | 2,842 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

VBScript Regular Expression Bug?

Using IIS 5.1, XP, dev studio 2003, ASP
I've discovered an insidious bug with the VBScript Regular Expression
object. I set the pattern to consist of the set of invalid filename
characters plus comma. I set global property to true then do a replace on a
SID. The Replace does nothing. However, if I attach the C++ (dev studio
2003) debugger to the IIS host process (dllhost.exe), every time I call
RegExp.Replace, the stack for one of the process's threads gets scrambled.
It ends up with the value 0x00000001 at the top of the stack! If your
debugger is set to stop on access violations, it always catches one (invalid
read trying to delete). The problem is insidious because, without the
debugger running, you would never know this is happening. ASP returns no
error. Potentially this could wreak havoc on your web application and cause
bizarre failures later on. Has anyone else run into this one? It seems to
happen only with the Replace method.
Jul 21 '05 #1
7 2473
You might want to show some code to reproduce

Jeff
"MichaelPyl es" <Mi**********@d iscussions.micr osoft.com> wrote in message
news:7A******** *************** ***********@mic rosoft.com...
Using IIS 5.1, XP, dev studio 2003, ASP
I've discovered an insidious bug with the VBScript Regular Expression
object. I set the pattern to consist of the set of invalid filename
characters plus comma. I set global property to true then do a replace on a SID. The Replace does nothing. However, if I attach the C++ (dev studio
2003) debugger to the IIS host process (dllhost.exe), every time I call
RegExp.Replace, the stack for one of the process's threads gets scrambled.
It ends up with the value 0x00000001 at the top of the stack! If your
debugger is set to stop on access violations, it always catches one (invalid read trying to delete). The problem is insidious because, without the
debugger running, you would never know this is happening. ASP returns no
error. Potentially this could wreak havoc on your web application and cause bizarre failures later on. Has anyone else run into this one? It seems to happen only with the Replace method.

Jul 21 '05 #2
Here's the asp code. The value for Filename would be a SID (so there should
be nothing to replace).

dim regEx
Set regEx = New RegExp ' Create regular expression.
regEx.Pattern = "[,/\:*?""<>|]"
regEx.Global = true
Filename = regEx.Replace(F ilename, "")
"Jeff Dillon" wrote:
You might want to show some code to reproduce

Jeff
"MichaelPyl es" <Mi**********@d iscussions.micr osoft.com> wrote in message
news:7A******** *************** ***********@mic rosoft.com...
Using IIS 5.1, XP, dev studio 2003, ASP
I've discovered an insidious bug with the VBScript Regular Expression
object. I set the pattern to consist of the set of invalid filename
characters plus comma. I set global property to true then do a replace on

a
SID. The Replace does nothing. However, if I attach the C++ (dev studio
2003) debugger to the IIS host process (dllhost.exe), every time I call
RegExp.Replace, the stack for one of the process's threads gets scrambled.
It ends up with the value 0x00000001 at the top of the stack! If your
debugger is set to stop on access violations, it always catches one

(invalid
read trying to delete). The problem is insidious because, without the
debugger running, you would never know this is happening. ASP returns no
error. Potentially this could wreak havoc on your web application and

cause
bizarre failures later on. Has anyone else run into this one? It seems

to
happen only with the Replace method.


Jul 21 '05 #3
And a SID would be??

Jeff
"MichaelPyl es" <Mi**********@d iscussions.micr osoft.com> wrote in message
news:3B******** *************** ***********@mic rosoft.com...
Here's the asp code. The value for Filename would be a SID (so there should be nothing to replace).

dim regEx
Set regEx = New RegExp ' Create regular expression.
regEx.Pattern = "[,/\:*?""<>|]"
regEx.Global = true
Filename = regEx.Replace(F ilename, "")
"Jeff Dillon" wrote:
You might want to show some code to reproduce

Jeff
"MichaelPyl es" <Mi**********@d iscussions.micr osoft.com> wrote in message
news:7A******** *************** ***********@mic rosoft.com...
Using IIS 5.1, XP, dev studio 2003, ASP
I've discovered an insidious bug with the VBScript Regular Expression
object. I set the pattern to consist of the set of invalid filename
characters plus comma. I set global property to true then do a replace on
a
SID. The Replace does nothing. However, if I attach the C++ (dev
studio 2003) debugger to the IIS host process (dllhost.exe), every time I call RegExp.Replace, the stack for one of the process's threads gets scrambled. It ends up with the value 0x00000001 at the top of the stack! If your
debugger is set to stop on access violations, it always catches one

(invalid
read trying to delete). The problem is insidious because, without the
debugger running, you would never know this is happening. ASP returns no error. Potentially this could wreak havoc on your web application and

cause
bizarre failures later on. Has anyone else run into this one? It

seems to
happen only with the Replace method.


Jul 21 '05 #4
Security Identifier (the ID used to uniquely identify a user account).
Here's one:

S-1-5-21-1368538393-2010016687-1202159320-10861

"Jeff Dillon" wrote:
And a SID would be??

Jeff
"MichaelPyl es" <Mi**********@d iscussions.micr osoft.com> wrote in message
news:3B******** *************** ***********@mic rosoft.com...
Here's the asp code. The value for Filename would be a SID (so there

should
be nothing to replace).

dim regEx
Set regEx = New RegExp ' Create regular expression.
regEx.Pattern = "[,/\:*?""<>|]"
regEx.Global = true
Filename = regEx.Replace(F ilename, "")
"Jeff Dillon" wrote:
You might want to show some code to reproduce

Jeff
"MichaelPyl es" <Mi**********@d iscussions.micr osoft.com> wrote in message
news:7A******** *************** ***********@mic rosoft.com...
> Using IIS 5.1, XP, dev studio 2003, ASP
> I've discovered an insidious bug with the VBScript Regular Expression
> object. I set the pattern to consist of the set of invalid filename
> characters plus comma. I set global property to true then do a replace on a
> SID. The Replace does nothing. However, if I attach the C++ (dev studio > 2003) debugger to the IIS host process (dllhost.exe), every time I call > RegExp.Replace, the stack for one of the process's threads gets scrambled. > It ends up with the value 0x00000001 at the top of the stack! If your
> debugger is set to stop on access violations, it always catches one
(invalid
> read trying to delete). The problem is insidious because, without the
> debugger running, you would never know this is happening. ASP returns no > error. Potentially this could wreak havoc on your web application and
cause
> bizarre failures later on. Has anyone else run into this one? It seems to
> happen only with the Replace method.


Jul 21 '05 #5
> Here's the asp code. The value for Filename would be a SID (so there
should
be nothing to replace).


If these are retrieved in any way similar to a GUID() then you might see
http://www.aspfaq.com/2358 ... this returns some extra bogus characters that
can cause problems as well.

In any case, I would guess that the problem lies in the method used to
retrieve the SID (or in the SID data itself), as opposed to a problem in
RegEx.

A
Jul 21 '05 #6
Well... all I can say is that with the code posted as part of my ASP page, I
get the trap in the C++ debugger when attached to dllhost.exe. Without it in
there, everything works ok. I swapped out the use of regExp.Replace with
separate Replace instructions and all is well.

"Aaron [SQL Server MVP]" wrote:
Here's the asp code. The value for Filename would be a SID (so there

should
be nothing to replace).


If these are retrieved in any way similar to a GUID() then you might see
http://www.aspfaq.com/2358 ... this returns some extra bogus characters that
can cause problems as well.

In any case, I would guess that the problem lies in the method used to
retrieve the SID (or in the SID data itself), as opposed to a problem in
RegEx.

A

Jul 21 '05 #7
I just verified the SID is OK from the C++ debugger. It gets returned from
one of our COM interface functions. It looks OK. In fact we use in other
places in our ASP app. We also use the regular expression object in many
places in our ASP app. However, in only this only place did we use the
Replace method. Otherwise, it seems to be working ok. (and you wouldn't
know it was doing anything out-of-line unless you had the C++ debugger
attached to dllhost.exe... and even then, perhaps you may not get the same
type of exception, if any, that I get... it's probably random... you would
need to break into the debugger after executing the Replace method and
examine the stack for each thread).

"Aaron [SQL Server MVP]" wrote:
Here's the asp code. The value for Filename would be a SID (so there

should
be nothing to replace).


If these are retrieved in any way similar to a GUID() then you might see
http://www.aspfaq.com/2358 ... this returns some extra bogus characters that
can cause problems as well.

In any case, I would guess that the problem lies in the method used to
retrieve the SID (or in the SID data itself), as opposed to a problem in
RegEx.

A

Jul 21 '05 #8

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
4172
by: Kenneth McDonald | last post by:
I'm working on the 0.8 release of my 'rex' module, and would appreciate feedback, suggestions, and criticism as I work towards finalizing the API and feature sets. rex is a module intended to make regular expressions easier to create and use (and in my experience as a regular expression user, it makes them MUCH easier to create and use.) I'm still working on formal documentation, and in any case, such documentation isn't necessarily the...
4
5153
by: Buddy | last post by:
Can someone please show me how to create a regular expression to do the following My text is set to MyColumn{1, 100} Test I want a regular expression that sets the text to the following testMyColumn{1, 100}Test Basically I want the regular expression to add the word test infront of the
4
3222
by: Neri | last post by:
Some document processing program I write has to deal with documents that have headers and footers that are unnecessary for the main processing part. Therefore, I'm using a regular expression to go over each document, find out if it contains a header and/or a footer and extract only the main content part. The headers and the footers have no specific format and I have to detect and remove them using a list of strings that may appear as...
11
5374
by: Dimitris Georgakopuolos | last post by:
Hello, I have a text file that I load up to a string. The text includes certain expression like {firstName} or {userName} that I want to match and then replace with a new expression. However, I want to use the text included within the brackets to do a lookup so that I can replace the expression with the new text. For example:
7
3825
by: Billa | last post by:
Hi, I am replaceing a big string using different regular expressions (see some example at the end of the message). The problem is whenever I apply a "replace" it makes a new copy of string and I want to avoid that. My question here is if there is a way to pass either a memory stream or array of "find", "replace" expressions or any other way to avoid multiple copies of a string. Any help will be highly appreciated
25
5151
by: Mike | last post by:
I have a regular expression (^(.+)(?=\s*).*\1 ) that results in matches. I would like to get what the actual regular expression is. In other words, when I apply ^(.+)(?=\s*).*\1 to " HEART (CONDUCTION DEFECT) 37.33/2 HEART (CONDUCTION DEFECT) WITH CATHETER 37.34/2 " the expression is "HEART (CONDUCTION DEFECT)". How do I gain access to the expression (not the matches) at runtime? Thanks, Mike
1
4380
by: Allan Ebdrup | last post by:
I have a dynamic list of regular expressions, the expressions don't change very often but they can change. And I have a single string that I want to match the regular expressions against and find the first regular expression that matches the string. I've gor the regular expressions ordered so that the highest priority is first (if two or more regular expressions match the string I want the first one returned) The code that does this has...
1
4378
by: missnoname | last post by:
Hi. Does anybody know what regular expression to use for a date that is in dd month ccyy format? For example, 13 January 2006. Thanks.
1
3398
by: NvrBst | last post by:
I want to use the .replace() method with the regular expression /^ %VAR % =,($|&)/. The following DOESN'T replace the "^default.aspx=,($|&)" regular expression with "": --------------------------------- myStringVar = myStringVar.replace("^" + iName + "=,($|&)", ""); --------------------------------- The following DOES replace it though: --------------------------------- var match = myStringVar.match("^" + iName + "=,($|&)");
0
8687
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
1
8914
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
8883
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
1
6534
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5874
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4376
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4629
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
3057
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
2347
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.