ID: 37448
Updated by: [EMAIL PROTECTED]
Reported By: coder1 at gmail dot com
-Status: Assigned
+Status: Bogus
Bug Type: CGI related
Operating System: Windows XP
PHP Version: 5.1.4
Assigned To: dmitry
New Comment:
This is not a PHP but isapi_fcgi.dll fault.
>From quick look into source code fcgi_server.c:373 I see a buffer
overflow.
contentLength = (Header.contentLengthB1 << 8) +
Header.contentLengthB0;// + Header.paddingLength;
rcvd = OS_Read(req_info->appServerSock,
(char *)&work_buffer, contentLength + Header.paddingLength);
work_buffer is declared as "char work_buffer[8192]" so in case if
packet length is larger then 8192 bytes isapi_fcgi.dll makes fault.
According to FastCGI specification it is legal to use packets up to
65535 bytes, so this is definitely isapi_fcg.dll's problem.
Previous Comments:
------------------------------------------------------------------------
[2006-11-08 21:15:16] coder1 at gmail dot com
open - issue still exists.
------------------------------------------------------------------------
[2006-11-07 05:26:39] xangelusx at hotmail dot com
Still having trouble on Windows 2003 with 5.2 (stable)! (See my
previous comment for details)
------------------------------------------------------------------------
[2006-10-19 23:19:43] sbugs6 at yahoo dot fr
With PHP 5.2.0RC6-dev (Oct 19 2006 20:17:20) on WinXP-SP2
<?php
echo str_repeat("-", 16340); // ok
echo str_repeat("-", 16341); // 503 Server too busy
?>
------------------------------------------------------------------------
[2006-10-11 02:31:30] snoopspecial at hotmail dot com
I have the same problem using Windows 2003 SP1 and PHP 5.1.6
I tried the output buffering = 1000 and no luck either.
please fix!
------------------------------------------------------------------------
[2006-10-05 02:51:36] xangelusx at hotmail dot com
I confirmed the problem using msisolak's test on a Win 2003 server with
PHP 5.1.6 running under fastcgi. Same on a Windows 2000 server with same
PHP config.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/37448
--
Edit this bug report at http://bugs.php.net/?id=37448&edit=1
