From:             php at lektec dot com dot au
Operating system: FreeBSD 4.7
PHP version:      4.3.3
PHP Bug Type:     Scripting Engine problem
Bug description:  File upload leak, cleanup not being performed

Description:
------------
When uploading files via a form.  If the user cancels the upload via the
stop button in the browser, the php script does not clean up the file
reminants.  If upload is completed the temporary file
/var/tmp/php[A-Za-Z0-9]6 is removed.  However in the case when the upload
is aborted it is left behind.

I have never noticed this before so I assume its new.  Currently running a
cron job to remove file reminants however this has a nasty sting if it
goes unchecked on a server with many file uploads.

Note that I am also running php accelerator.

'./configure' '--enable-versioning' '--enable-memory-limit'
'--with-layout=GNU' '--with-zlib-dir=/usr' '--disable-all'
'--with-regex=php' '--disable-cli' '--with-apxs=/usr/local/sbin/apxs'
'--with-bz2=/usr' '--enable-ctype' '--enable-ftp' '--with-gd'
'--enable-gd-native-ttf' '--enable-gd-jis-conv'
'--with-freetype-dir=/usr/local' '--with-jpeg-dir=/usr/local'
'--with-png-dir=/usr/local' '--with-xpm-dir=/usr/local'
'--with-imap=/usr/local' '--with-mysql=/usr/local' '--enable-overload'
'--with-pcre-regex=yes' '--enable-posix' '--enable-session'
'--with-sybase-ct=/usr/local' '--enable-tokenizer' '--enable-xml'
'--with-expat-dir=/usr/local' '--with-zlib=yes' '--prefix=/usr/local'
'i386-portbld-freebsd4.7' 



-- 
Edit bug report at http://bugs.php.net/?id=26075&edit=1
-- 
Try a CVS snapshot (php4):  http://bugs.php.net/fix.php?id=26075&r=trysnapshot4
Try a CVS snapshot (php5):  http://bugs.php.net/fix.php?id=26075&r=trysnapshot5
Fixed in CVS:               http://bugs.php.net/fix.php?id=26075&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=26075&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=26075&r=needtrace
Try newer version:          http://bugs.php.net/fix.php?id=26075&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=26075&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=26075&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=26075&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=26075&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=26075&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=26075&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=26075&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=26075&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=26075&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=26075&r=float

Reply via email to