#38939 [NEW]: configure fail with mysql4.1.21-max-icc
From: linuzboy at 163 dot com Operating system: Debian etch PHP version: 5.1.6 PHP Bug Type: MySQL related Bug description: configure fail with mysql4.1.21-max-icc Description: I have errors while compiling php 5.1.6 with mysql 4.1.21 (mysql-max-4.1.21-pc-linux-gnu-i686-icc-glibc23) ./configure --enable-magic-quotes --with-curl --enable-zend-multibyte \ --enable-fastcgi --enable-mbstring --enable-mbregex --with-config-file-path=/etc \ --with-gd --with-zlib --with-jpeg --with-png --with-xpm \ --enable-gd-native-ttf --with-ttf --with-mysql=/usr/local/mysql \ --with-mysqli=/usr/local/mysql/bin/mysql_config --enable-sockets \ --without-sqlite --with-iconv -with-pear -disable-debug \ --with-freetype-dir --with-gettext --enable-memory-limit But I always get the error ... checking for mysql_close in -lmysqlclient... no checking for mysql_error in -lmysqlclient... no configure: error: mysql configure failed. Please check config.log for more information. ... And: configure:58533: checking for mysql_close in -lmysqlclient configure:58552: gcc -o conftest -I/usr/include -g -O2 -Wl,-rpath,/usr/local/mysql/lib -L/usr/local/mysql/lib -L/usr/lib conftest.c -lmysqlclient -lfreetype -lpng -lz -lcurl -lz -lresolv -lm -ldl -lnsl -lxml2 -lcurl -lgssapi_krb5 -lkrb5 -lk5crypto -lkrb5support -lcom_err -lresolv -lidn -lssl -lcrypto -ldl -lssl -lcrypto -lz -lxml2 15 /usr/local/mysql/lib/libmysqlclient.a(client.o): In function `mysql_real_connect': client.c:(.text+0x1482): undefined reference to `_intel_fast_memcpy' /usr/local/mysql/lib/libmysqlclient.a(client.o): In function `cli_read_rows': client.c:(.text+0x1f93): undefined reference to `_intel_fast_memcpy' /usr/local/mysql/lib/libmysqlclient.a(net.o): In function `my_net_write': Seeing the '_intel_fast_memcpy', I knew that it is because of the icc compiled mysql. Can you help me how to solve this problem? I do not want to download a new gcc compiled mysql. Maybe I just need libmysqlclient 4.1.21 (non-rpm), and where to download it? I am using gcc 4.1.2. -- Edit bug report at http://bugs.php.net/?id=38939edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=38939r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=38939r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=38939r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=38939r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=38939r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=38939r=needtrace Need Reproduce Script:http://bugs.php.net/fix.php?id=38939r=needscript Try newer version:http://bugs.php.net/fix.php?id=38939r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=38939r=support Expected behavior:http://bugs.php.net/fix.php?id=38939r=notwrong Not enough info: http://bugs.php.net/fix.php?id=38939r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=38939r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=38939r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38939r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=38939r=dst IIS Stability:http://bugs.php.net/fix.php?id=38939r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=38939r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=38939r=float No Zend Extensions: http://bugs.php.net/fix.php?id=38939r=nozend MySQL Configuration Error:http://bugs.php.net/fix.php?id=38939r=mysqlcfg
#38939 [Opn-Bgs]: configure fail with mysql4.1.21-max-icc
ID: 38939 Updated by: [EMAIL PROTECTED] Reported By: linuzboy at 163 dot com -Status: Open +Status: Bogus Bug Type: MySQL related Operating System: Debian etch PHP Version: 5.1.6 New Comment: Sorry, but your problem does not imply a bug in PHP itself. For a list of more appropriate places to ask for help using PHP, please visit http://www.php.net/support.php as this bug system is not the appropriate forum for asking support questions. Due to the volume of reports we can not explain in detail here why your report is not a bug. The support channels will be able to provide an explanation for you. Thank you for your interest in PHP. . Previous Comments: [2006-09-24 11:11:46] linuzboy at 163 dot com Description: I have errors while compiling php 5.1.6 with mysql 4.1.21 (mysql-max-4.1.21-pc-linux-gnu-i686-icc-glibc23) ./configure --enable-magic-quotes --with-curl --enable-zend-multibyte \ --enable-fastcgi --enable-mbstring --enable-mbregex --with-config-file-path=/etc \ --with-gd --with-zlib --with-jpeg --with-png --with-xpm \ --enable-gd-native-ttf --with-ttf --with-mysql=/usr/local/mysql \ --with-mysqli=/usr/local/mysql/bin/mysql_config --enable-sockets \ --without-sqlite --with-iconv -with-pear -disable-debug \ --with-freetype-dir --with-gettext --enable-memory-limit But I always get the error ... checking for mysql_close in -lmysqlclient... no checking for mysql_error in -lmysqlclient... no configure: error: mysql configure failed. Please check config.log for more information. ... And: configure:58533: checking for mysql_close in -lmysqlclient configure:58552: gcc -o conftest -I/usr/include -g -O2 -Wl,-rpath,/usr/local/mysql/lib -L/usr/local/mysql/lib -L/usr/lib conftest.c -lmysqlclient -lfreetype -lpng -lz -lcurl -lz -lresolv -lm -ldl -lnsl -lxml2 -lcurl -lgssapi_krb5 -lkrb5 -lk5crypto -lkrb5support -lcom_err -lresolv -lidn -lssl -lcrypto -ldl -lssl -lcrypto -lz -lxml2 15 /usr/local/mysql/lib/libmysqlclient.a(client.o): In function `mysql_real_connect': client.c:(.text+0x1482): undefined reference to `_intel_fast_memcpy' /usr/local/mysql/lib/libmysqlclient.a(client.o): In function `cli_read_rows': client.c:(.text+0x1f93): undefined reference to `_intel_fast_memcpy' /usr/local/mysql/lib/libmysqlclient.a(net.o): In function `my_net_write': Seeing the '_intel_fast_memcpy', I knew that it is because of the icc compiled mysql. Can you help me how to solve this problem? I do not want to download a new gcc compiled mysql. Maybe I just need libmysqlclient 4.1.21 (non-rpm), and where to download it? I am using gcc 4.1.2. -- Edit this bug report at http://bugs.php.net/?id=38939edit=1
#38940 [NEW]: performance is much slower after upgrade
From: quip at quip dot cz Operating system: FreeBSD 6.0 PHP version: 5.1.6 PHP Bug Type: Performance problem Bug description: performance is much slower after upgrade Description: After security upgrade from 5.1.4 to 5.1.6 on the production server, we have performance problems. CPU load was about 0.6 - 1 with version 5.1.4, but after ugprade to 5.1.6, load is from 1.5 - 3 and Apache somtimes starts forking too many childs. If we downgrade back to 5.1.4, load goes back to 0.6 - 1. Reproduce code: --- FreeBSD 6.0-STABLE SMP (Dual Xeon 3GHz with HTT + 2GB RAM) Apache 2.0.59 PHP5 5.1.6 Installed PHP extensions: php5-5.1.6 php5-bz2-5.1.6 php5-curl-5.1.6 php5-dom-5.1.6 php5-exif-5.1.6 php5-extensions-1.0 php5-ftp-5.1.6 php5-gd-5.1.6 php5-iconv-5.1.6 php5-mbstring-5.1.6 php5-mhash-5.1.6 php5-mysql-5.1.6 php5-mysqli-5.1.6 php5-openssl-5.1.6 php5-pcre-5.1.6 php5-posix-5.1.6 php5-session-5.1.6 php5-snmp-5.1.6 php5-sockets-5.1.6 php5-sysvmsg-5.1.6 php5-sysvsem-5.1.6 php5-sysvshm-5.1.6 php5-xml-5.1.6 php5-xmlreader-5.1.6 php5-xmlrpc-5.1.6 php5-xmlwriter-5.1.6 php5-zlib-5.1.6 pecl-PDO-1.0.3 pecl-PDO_MYSQL-1.0.1 pecl-zip-1.7.0 Expected result: I expect same performance as with 5.1.4 Actual result: -- The result is that webaplication (custom CMS) became unresponsive under heavy load. Normaly Apache runs with about 20 childs, but from time to time (1 - 10 times per day) Apache starts forking new childs until MaxClients limit is reached, then is restarted by watchdog script. There was not this type of problem until upgrade to 5.1.6 2 same servers are running only Apache and one virtual host (loadbalanced) with one webapplication, database is on the third machine, so there is no hidden things causing this load. Let me know if I can do/post more to find source of this performance problem. -- Edit bug report at http://bugs.php.net/?id=38940edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=38940r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=38940r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=38940r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=38940r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=38940r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=38940r=needtrace Need Reproduce Script:http://bugs.php.net/fix.php?id=38940r=needscript Try newer version:http://bugs.php.net/fix.php?id=38940r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=38940r=support Expected behavior:http://bugs.php.net/fix.php?id=38940r=notwrong Not enough info: http://bugs.php.net/fix.php?id=38940r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=38940r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=38940r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38940r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=38940r=dst IIS Stability:http://bugs.php.net/fix.php?id=38940r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=38940r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=38940r=float No Zend Extensions: http://bugs.php.net/fix.php?id=38940r=nozend MySQL Configuration Error:http://bugs.php.net/fix.php?id=38940r=mysqlcfg
#38940 [Opn-Bgs]: performance is much slower after upgrade
ID: 38940 Updated by: [EMAIL PROTECTED] Reported By: quip at quip dot cz -Status: Open +Status: Bogus Bug Type: Performance problem Operating System: FreeBSD 6.0 PHP Version: 5.1.6 New Comment: We only support our own sources, not ports or patched source or binary packages. And we need MUCh more specific information anyway. Previous Comments: [2006-09-24 12:35:40] quip at quip dot cz Description: After security upgrade from 5.1.4 to 5.1.6 on the production server, we have performance problems. CPU load was about 0.6 - 1 with version 5.1.4, but after ugprade to 5.1.6, load is from 1.5 - 3 and Apache somtimes starts forking too many childs. If we downgrade back to 5.1.4, load goes back to 0.6 - 1. Reproduce code: --- FreeBSD 6.0-STABLE SMP (Dual Xeon 3GHz with HTT + 2GB RAM) Apache 2.0.59 PHP5 5.1.6 Installed PHP extensions: php5-5.1.6 php5-bz2-5.1.6 php5-curl-5.1.6 php5-dom-5.1.6 php5-exif-5.1.6 php5-extensions-1.0 php5-ftp-5.1.6 php5-gd-5.1.6 php5-iconv-5.1.6 php5-mbstring-5.1.6 php5-mhash-5.1.6 php5-mysql-5.1.6 php5-mysqli-5.1.6 php5-openssl-5.1.6 php5-pcre-5.1.6 php5-posix-5.1.6 php5-session-5.1.6 php5-snmp-5.1.6 php5-sockets-5.1.6 php5-sysvmsg-5.1.6 php5-sysvsem-5.1.6 php5-sysvshm-5.1.6 php5-xml-5.1.6 php5-xmlreader-5.1.6 php5-xmlrpc-5.1.6 php5-xmlwriter-5.1.6 php5-zlib-5.1.6 pecl-PDO-1.0.3 pecl-PDO_MYSQL-1.0.1 pecl-zip-1.7.0 Expected result: I expect same performance as with 5.1.4 Actual result: -- The result is that webaplication (custom CMS) became unresponsive under heavy load. Normaly Apache runs with about 20 childs, but from time to time (1 - 10 times per day) Apache starts forking new childs until MaxClients limit is reached, then is restarted by watchdog script. There was not this type of problem until upgrade to 5.1.6 2 same servers are running only Apache and one virtual host (loadbalanced) with one webapplication, database is on the third machine, so there is no hidden things causing this load. Let me know if I can do/post more to find source of this performance problem. -- Edit this bug report at http://bugs.php.net/?id=38940edit=1
#38941 [NEW]: -with-imap doesnt compile anymore after uw-imap update
From: spam2 at rhsoft dot net Operating system: Linux Fedora 5 PHP version: 5.1.6 PHP Bug Type: Compile Failure Bug description: -with-imap doesnt compile anymore after uw-imap update Description: Since last update from uw-imap with yum on fedora fc5 it seems that php does not compile any more with the extension php-sources and make-calls are the same, but after i seen the update i decided to compile php again the new version package: uw-imap-devel-2006-2.fc5.1 below the messages from the complier -- /data/development/src/php/ext/imap/php_imap.c:78: error: conflicting types for 'utf8_mime2text' /usr/include/imap/utf8.h:546: error: previous declaration of 'utf8_mime2text' was here make: *** [ext/imap/php_imap.lo] Fehler 1 -- Edit bug report at http://bugs.php.net/?id=38941edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=38941r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=38941r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=38941r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=38941r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=38941r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=38941r=needtrace Need Reproduce Script:http://bugs.php.net/fix.php?id=38941r=needscript Try newer version:http://bugs.php.net/fix.php?id=38941r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=38941r=support Expected behavior:http://bugs.php.net/fix.php?id=38941r=notwrong Not enough info: http://bugs.php.net/fix.php?id=38941r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=38941r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=38941r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38941r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=38941r=dst IIS Stability:http://bugs.php.net/fix.php?id=38941r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=38941r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=38941r=float No Zend Extensions: http://bugs.php.net/fix.php?id=38941r=nozend MySQL Configuration Error:http://bugs.php.net/fix.php?id=38941r=mysqlcfg
#38909 [Bgs-Csd]: Feature Request for Audio
ID: 38909 User updated by: admin at mysdomains dot com Reported By: admin at mysdomains dot com -Status: Bogus +Status: Closed Bug Type: Unknown/Other Function Operating System: Windows (XP) PHP Version: 5.1.6 New Comment: I am sorry for disturbing you, the busy people. Thanks. Previous Comments: [2006-09-21 10:15:13] [EMAIL PROTECTED] pecl/FliteTTS [2006-09-21 10:03:06] admin at mysdomains dot com Description: I actually want my php code to convert a string of numbers/letters into a hearable sound/audio for the user. In order to avoid robotic registrations on my site, I use 'Turing Number', actually a picture. I want my users to listen to it on their choice. I tried to use OpenAl extension for it, but it doesn't have such feature. Thanks, Muhammad Yasir -- Edit this bug report at http://bugs.php.net/?id=38909edit=1
#38912 [Opn-Bgs]: preg_split('/\s+/', '') returns an array of length one
ID: 38912
Updated by: [EMAIL PROTECTED]
Reported By: barry dot wills at providence dot org
-Status: Open
+Status: Bogus
Bug Type: PCRE related
Operating System: Red Hat Fedora Core 4
PHP Version: 5.1.6
New Comment:
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php
To avoid empty matches you need to pass the
PREG_SPLIT_NO_EMPTY flag to preg_split().
Previous Comments:
[2006-09-21 14:11:31] barry dot wills at providence dot org
Description:
preg_split('/\s/', '') is used to split a string whose fields are
delimited by whitespace chars. When the string is empty (),
preg_split returns a populated array rather than an empty array.
Expected: the equivalent in Perl returns an empty array (split(/\s/,
'')).
Unexpected: preg_split in PHP returns a populated array.
Reproduce code:
---
// Example 1 produces: Array ( [0] = )
$a = preg_split('/\s/', '');
print_r($a);
// Example 2 produces: Array ( [0] = )
$a = preg_split('/\s+/', '');
print_r($a);
// Example 3 produces: Array ( [0] = [1] = )
$a = preg_split('/\s*/', '');
print_r($a);
// Perl produces an empty array in all three cases.
Expected result:
No output. Which is to say, the above code should be equivalent to
PHP's:
$a = array();
Actual result:
--
Array ( [0] = )
Array ( [0] = )
Array ( [0] = [1] = )
--
Edit this bug report at http://bugs.php.net/?id=38912edit=1
#38941 [Opn-Csd]: -with-imap doesnt compile anymore after uw-imap update
ID: 38941 Updated by: [EMAIL PROTECTED] Reported By: spam2 at rhsoft dot net -Status: Open +Status: Closed Bug Type: Compile Failure Operating System: Linux Fedora 5 PHP Version: 5.1.6 New Comment: This bug has been fixed in CVS. Snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. Thank you for the report, and for helping us make PHP better. Previous Comments: [2006-09-24 15:44:18] spam2 at rhsoft dot net Description: Since last update from uw-imap with yum on fedora fc5 it seems that php does not compile any more with the extension php-sources and make-calls are the same, but after i seen the update i decided to compile php again the new version package: uw-imap-devel-2006-2.fc5.1 below the messages from the complier -- /data/development/src/php/ext/imap/php_imap.c:78: error: conflicting types for 'utf8_mime2text' /usr/include/imap/utf8.h:546: error: previous declaration of 'utf8_mime2text' was here make: *** [ext/imap/php_imap.lo] Fehler 1 -- Edit this bug report at http://bugs.php.net/?id=38941edit=1
#38942 [NEW]: Double old-style-ctor inheritance
From: hannes dot magnusson at gmail dot com
Operating system: *
PHP version: 5CVS-2006-09-24 (CVS)
PHP Bug Type: Scripting Engine problem
Bug description: Double old-style-ctor inheritance
Description:
The engine seems to register old-style-ctors twice, once
during parent-ctor-inheriting and once during
normal-method-inheriting
Reproduce code:
---
?php
class foo {
public function foo() {}
}
class bar extends foo {
}
ReflectionClass::export(bar);
Expected result:
- Methods [1] {
Method [ user, inherits foo, ctor public method
foo ] {
@@ /usr/src/php/5.2/bug.php 3 - 3
}
Actual result:
--
- Methods [2] {
Method [ user, inherits foo, ctor public method
foo ] {
@@ /usr/src/php/5.2/bug.php 3 - 3
}
Method [ user, inherits foo, ctor public method
foo ] {
@@ /usr/src/php/5.2/bug.php 3 - 3
}
--
Edit bug report at http://bugs.php.net/?id=38942edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=38942r=trysnapshot44
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=38942r=trysnapshot52
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=38942r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=38942r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=38942r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=38942r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=38942r=needscript
Try newer version:http://bugs.php.net/fix.php?id=38942r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=38942r=support
Expected behavior:http://bugs.php.net/fix.php?id=38942r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=38942r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=38942r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=38942r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38942r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=38942r=dst
IIS Stability:http://bugs.php.net/fix.php?id=38942r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=38942r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=38942r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=38942r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=38942r=mysqlcfg
#38942 [Opn-Ver]: Double old-style-ctor inheritance
ID: 38942
Updated by: [EMAIL PROTECTED]
Reported By: hannes dot magnusson at gmail dot com
-Status: Open
+Status: Verified
Bug Type: Scripting Engine problem
Operating System: *
PHP Version: 5CVS-2006-09-24 (CVS)
New Comment:
Patch: http://php.is/bugs/38942/bug38942.patch.txt
Previous Comments:
[2006-09-24 18:14:33] hannes dot magnusson at gmail dot com
Description:
The engine seems to register old-style-ctors twice, once
during parent-ctor-inheriting and once during
normal-method-inheriting
Reproduce code:
---
?php
class foo {
public function foo() {}
}
class bar extends foo {
}
ReflectionClass::export(bar);
Expected result:
- Methods [1] {
Method [ user, inherits foo, ctor public method
foo ] {
@@ /usr/src/php/5.2/bug.php 3 - 3
}
Actual result:
--
- Methods [2] {
Method [ user, inherits foo, ctor public method
foo ] {
@@ /usr/src/php/5.2/bug.php 3 - 3
}
Method [ user, inherits foo, ctor public method
foo ] {
@@ /usr/src/php/5.2/bug.php 3 - 3
}
--
Edit this bug report at http://bugs.php.net/?id=38942edit=1
#38915 [Opn]: mod_php: system() (and similar) don't cleanup opened handles of Apache
ID: 38915
User updated by: dimmoborgir at gmail dot com
Reported By: dimmoborgir at gmail dot com
Status: Open
Bug Type: Apache2 related
Operating System: UNIX
-PHP Version: 5.2.0RC4
+PHP Version: 4.4.3, 4.4.4, 5.0.4, 5.1.4, 5.1.6, 5.2.0RC5
New Comment:
Tested on versions 4.4.3, 4.4.4, 5.0.4, 5.1.4, 5.1.6, 5.2.0RC5.
Previous Comments:
[2006-09-21 19:15:25] dimmoborgir at gmail dot com
Description:
The problem is in exec, system, popen (and similar) PHP functions. The
fact is that PHP doesn't sanitize opened file descriptors before
executing a program.
These functions use popen() C function to spawn a program.
popen() is equal to the successive execution of
pipe(), fork(), dup2(), exec().
These functions keep all opened handles. (Except STDOUT, which is
replaced to pipe).
This bug makes php-includes vulnerabilities more dangerous.
If the server uses mod_php, and we can execute shell commands via
system(), then we can, e.g. stop apache processes (by sending a
SIGSTOP), and to listen and process connections on 80 port (opened by
Apache, and transmitted to us by PHP). Also we can write anything to
its errorlog.
Reproduce code:
---
Some steps to reproduce a bug.
First. Simple program to wait :)
# cat test1.c
int main()
{
setsid( );
sleep( 1 );
}
#gcc -o test1 test1.c
Ok. Let's make a php script:
#cat a.php
?php
system( ./test1 );
?
Request: http://127.0.0.1/a.php
Good. Now see opened handles:
#lsof | grep test1
test1 cwdDIR /usr/local/apache2/htdocs
test1 rtdDIR /
test1 txtREG /var/www/html/test1
test1 memREG /lib/tls/libc-2.3.5.so
test1 memREG /lib/ld-2.3.5.so
test1 memREG [stack] (stat: No such file or
directory)
test1 0r CHR /dev/null
test1 1w FIFO pipe
test1 2w REG /usr/local/apache2/logs/error_log
test1 3u IPv4 *:http (LISTEN)
test1 4r FIFO pipe
test1 5w FIFO pipe
test1 6w REG /usr/local/apache2/logs/error_log
test1 7w REG /usr/local/apache2/logs/access_log
test1 8r unknown inode type
test1 9u IPv4 10.0.0.2:http-10.0.0.1:2134
(CLOSE_WAIT)
So, our test1 has apache's handles. Now we can do something like that:
int p = getsid( 0 ); // get current Process Group Id
setsid( ); // become session leader
kill( -p, SIGSTOP ); // good night, Apache Process Group :)
And after that:
for ( sock = 3; sock getdtablesize(); sock++ ) // find valid socket
handle
if ( listen (sock, 10) == 0 ) break;
Full exploit is available on http://hackerdom.ru/~dimmo/phpexpl.c
Expected result:
I didn't expected program, executed via system() PHP function, to have
all opened descriptors of Apache Web Server (including 80 port, error
and access logs, opened connections, etc...)
Actual result:
--
Our PHP program has all descriptors of Apache Server.
--
Edit this bug report at http://bugs.php.net/?id=38915edit=1
#38890 [Opn-Bgs]: imap_sort() returns array of empty values
ID: 38890 User updated by: Russell dot Mosemann at cune dot edu Reported By: Russell dot Mosemann at cune dot edu -Status: Open +Status: Bogus Bug Type: IMAP related Operating System: Debian 3.1 Etch PHP Version: 5.1.6 New Comment: After debugging the code, the problem was traced to imap-200x using US-ASCII as the default character set when no character set was specified but Courier IMAP 1.7.3 not recognizing that character set. That caused an error to be returned by imap_sort(). One solution is to replace US-ASCII in imap-200x/src/c-client/imap4r1.c with ISO-8859-1 as the default character set. After making that change. imap_sort() returns the expected values. Previous Comments: [2006-09-20 02:04:26] Russell dot Mosemann at cune dot edu Description: imap_sort($stream, SORTARRIVAL, 1) returns an array with the same number of items as messages in the mailbox (e.g., 438 messages), but each location in the array is empty. The problem occurs with (imap-2002 or imap-2006) and (4.4.2 or 4.4.4 or 5.1.6 or 5.2R4). Reading from the Courier IMAP server with other clients works fine. This is being compiled as a module for Apache 2.2.3. The default locale on the server is en_US.UTF-8. configure --with-apxs2=/local/apache/bin/apxs --disable-cli \ --disable-cgi --without-pear --disable-ipv6 --disable-all \ --with-imap=/local/home/mose/imap-2006 \ --with-ldap --with-mysql --with-mysql-sock --with-pcre-regex Reproduce code: --- imap_open($stream, $user, $password, $options); return imap_sort($stream, SORTARRIVAL, 1); Expected result: The returned array should be a list of integers representing messages ordered by arrival date and time. Actual result: -- Each location of the array is empty. It is as if the message numbers were lost, or the message number is being retrieved from the wrong place. -- Edit this bug report at http://bugs.php.net/?id=38890edit=1
#38680 [Ctl-Asn]: json_decode won't decode json_encode
ID: 38680 Updated by: [EMAIL PROTECTED] Reported By: RQuadling at GMail dot com -Status: Critical +Status: Assigned -Bug Type: Documentation problem +Bug Type: Unknown/Other Function Operating System: Windows XP SP2 -PHP Version: Irrelevant +PHP Version: 5.2 -Assigned To: +Assigned To: ilia New Comment: reclassified assigned to Ilia Previous Comments: [2006-09-24 00:21:07] [EMAIL PROTECTED] This is a documentation issue that must (should) be resolved before PHP 5.2 is released. The current docs were taken straight out of the README that's within the json extension sources. Please summarize exactly what needs to be changed here. [2006-09-04 08:55:41] RQuadling at GMail dot com Why is this bogus? I've reopened it as the PHP Dox makes no mention of the restriction that only objects and arrays are encodable/decodable. And if the json_encode only dealt with arrays objects rather than all types except resources, then the code would be cleaner and give less issue. [2006-09-01 14:43:33] RQuadling at GMail dot com I'm not sure I follow. I'm reading the PHP doc and json_encode says it can encode _ANY_ type except resource. json_decode says it takes a JSON encoded string and converts it into a PHP variable. So, $m_var = json_decode(json_decode($m_original_var)); $m_var == $m_original_var. Maybe NOT ===, but at least == So, there are several issues here. json_encode says ANY type. Not just objects or arrays. Admittedly, an array with int/bool/null in all work fine as does a multi-dimensional array. If the dox said JUST arrays and objects, then that would be fine too. You could then emit a warning when the types supplied wasn't an array or an object. But, as it stands, the dox say __ANY__, so, it is VERY reasonable to assume that encoding boolean/integers/null via json_encode will produce something usable. AND json_decode says it will decode any json_encoded string. Now, at this stage, I'm not even using the data, I'm just encoding it and then instantly decoding it. Not via a browser or JS. Just all in PHP. And this is not working. In your reply you say that true/false/null/numerics in raw form are not valid JSON structures, so json_decode will reject them and output NULL - Fair enough, but not what my bug report is about. I'm saying that json_encode is NOT producing correctly encoded structures for json_decode, NOT that I'm manually creating these structures and expecting them to work. ?php var_dump(json_decode(json_encode(True))); var_dump(json_decode(json_encode(False))); var_dump(json_decode(json_encode(Null))); var_dump(json_decode(json_encode(pi(; var_dump(json_decode(json_encode(phpversion(; ? produces NULL NULL NULL NULL NULL Very much NOT what would be expected! [2006-09-01 14:25:21] [EMAIL PROTECTED] Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php This is a documentation issue... true/false/null/numerics in raw form are not valid JSON structures, so json_decode will reject them and output NULL. Basically, if JSON_checker (http://www.json.org/JSON_checker/) says something is invalid JSON, then json_decode will return NULL. json_encode emits true/false/etc as any other way makes even less sense. :) [2006-09-01 13:30:31] [EMAIL PROTECTED] Omar: really a doc issue? The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/38680 -- Edit this bug report at http://bugs.php.net/?id=38680edit=1
#38943 [NEW]: serious misbehaviour extending ZipArchive class
From: judas dot iscariote at gmail dot com
Operating system: Linux
PHP version: 5CVS-2006-09-24 (CVS)
PHP Bug Type: Zip Related
Bug description: serious misbehaviour extending ZipArchive class
Description:
see the source, properties cannot be set correctly.
Reproduce code:
---
?php
class myZip extends ZipArchive {
public $testp = 1;
}
$z = new myZip;
$z-testp = 'foobar';
var_dump($z);
?
Expected result:
object(myZip)#1 (6) {
[testp]=
string(6) foobar
[status]=
int(0)
[statusSys]=
int(0)
[numFiles]=
int(0)
[filename]=
string(0)
[comment]=
string(0)
}
Actual result:
--
Warning: Attempt to assign property of non-object in bug.php on line 7
object(myZip)#1 (6) {
[testp]=
int(1)
[status]=
int(0)
[statusSys]=
int(0)
[numFiles]=
int(0)
[filename]=
string(0)
[comment]=
string(0)
}
--
Edit bug report at http://bugs.php.net/?id=38943edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=38943r=trysnapshot44
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=38943r=trysnapshot52
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=38943r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=38943r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=38943r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=38943r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=38943r=needscript
Try newer version:http://bugs.php.net/fix.php?id=38943r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=38943r=support
Expected behavior:http://bugs.php.net/fix.php?id=38943r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=38943r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=38943r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=38943r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38943r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=38943r=dst
IIS Stability:http://bugs.php.net/fix.php?id=38943r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=38943r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=38943r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=38943r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=38943r=mysqlcfg
#38943 [Opn-Csd]: serious misbehaviour extending ZipArchive class
ID: 38943
Updated by: [EMAIL PROTECTED]
Reported By: judas dot iscariote at gmail dot com
-Status: Open
+Status: Closed
Bug Type: Zip Related
Operating System: Linux
PHP Version: 5CVS-2006-09-24 (CVS)
-Assigned To:
+Assigned To: pajoye
New Comment:
This bug has been fixed in CVS.
Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
Thank you for the report, and for helping us make PHP better.
Thanks for this small test case :)
Fixed in 5.2 cvs and HEAD (6). Pecl release will follow later this
week.
Previous Comments:
[2006-09-24 21:27:39] judas dot iscariote at gmail dot com
Description:
see the source, properties cannot be set correctly.
Reproduce code:
---
?php
class myZip extends ZipArchive {
public $testp = 1;
}
$z = new myZip;
$z-testp = 'foobar';
var_dump($z);
?
Expected result:
object(myZip)#1 (6) {
[testp]=
string(6) foobar
[status]=
int(0)
[statusSys]=
int(0)
[numFiles]=
int(0)
[filename]=
string(0)
[comment]=
string(0)
}
Actual result:
--
Warning: Attempt to assign property of non-object in bug.php on line 7
object(myZip)#1 (6) {
[testp]=
int(1)
[status]=
int(0)
[statusSys]=
int(0)
[numFiles]=
int(0)
[filename]=
string(0)
[comment]=
string(0)
}
--
Edit this bug report at http://bugs.php.net/?id=38943edit=1
#38944 [NEW]: ZipArchive exits with SEGV
From: judas dot iscariote at gmail dot com
Operating system: linux
PHP version: 5CVS-2006-09-25 (CVS)
PHP Bug Type: Zip Related
Bug description: ZipArchive exits with SEGV
Description:
the following code segfaults.
Reproduce code:
---
?php
class zipper {
public $zip_handler;
public function __construct( )
{
$this-zip_handler = new ZipArchive;
}
public function Myopen($filename)
{
return $this-zip_handler-open($filename, ZIPARCHIVE::CREATE);
}
}
$foo = new zipper();
$foo-Myopen('/tmp/foo.zip');
var_dump($foo);
?
Expected result:
$foo var_dump'ed
Actual result:
--
Program received signal SIGSEGV, Segmentation fault.
0x00623d88 in zip_get_archive_comment (za=0xa74b50,
lenp=0x7fffaeae4534, flags=0)
at /home/cristian/php-src/ext/zip/lib/zip_get_archive_comment.c:49
49 *lenp = za-cdir-comment_len;
(gdb) bt full
#0 0x00623d88 in zip_get_archive_comment (za=0xa74b50,
lenp=0x7fffaeae4534, flags=0)
at /home/cristian/php-src/ext/zip/lib/zip_get_archive_comment.c:49
No locals.
#1 0x006181a5 in php_zipobj_get_zip_comment (za=0xa74b50,
len=0x7fffaeae4534)
at /home/cristian/php-src/ext/zip/php_zip.c:255
No locals.
#2 0x006182c3 in php_zip_property_reader (obj=0x2b0afc0a57b0,
hnd=0x99b000, retval=0x7fffaeae45c8, newzval=0)
at /home/cristian/php-src/ext/zip/php_zip.c:322
retchar = 0x0
retint = 0
len = 0
#3 0x006187f6 in php_zip_get_properties (object=0x2b0afc0a5638)
at /home/cristian/php-src/ext/zip/php_zip.c:467
obj = (ze_zip_object *) 0x2b0afc0a57b0
hnd = (zip_prop_handler *) 0x99b000
props = (HashTable *) 0x2b0afc0a5840
val = (zval *) 0x2b0afc0a5ee8
ret = 0
key = 0x99afe0 comment
key_len = 8
pos = (HashPosition) 0x99afa0
num_key = 5
#4 0x005e082e in php_var_dump (struc=0x2b0afc0a5498, level=3) at
/home/cristian/php-src/ext/standard/var.c:140
myht = (HashTable *) 0x0
class_name = 0x7fffaeae4700 G\177
class_name_len = 5
php_element_dump_func = (int (*)(zval **, int, struct
__va_list_tag *, zend_hash_key *)) 0x5aeae4770
#5 0x005e04bf in php_object_property_dump (zv=0x2b0afc0a5498,
num_args=1, args=0x7fffaeae47d0,
hash_key=0x7fffaeae47b0) at
/home/cristian/php-src/ext/standard/var.c:96
level = 1
prop_name = 0x2b0afc0a54c0 zip_handler
class_name = 0x0
#6 0x0068f27e in zend_hash_apply_with_arguments
(ht=0x2b0afc0a5368, destruct=0x5e034b php_object_property_dump,
num_args=1) at /home/cristian/php-src/Zend/zend_hash.c:710
p = (Bucket *) 0x2b0afc0a5480
args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area =
0x7fffaeae48b0, reg_save_area = 0x7fffaeae47f0}}
hash_key = {arKey = 0x2b0afc0a54c0 zip_handler, nKeyLength = 12,
h = 16128149184387123093}
#7 0x005e099b in php_var_dump (struc=0x2b0afc0803b8, level=1) at
/home/cristian/php-src/ext/standard/var.c:152
myht = (HashTable *) 0x2b0afc0a5368
class_name = 0x2b0afc0a5318
class_name_len = 6
php_element_dump_func = (int (*)(zval **, int, struct
__va_list_tag *,
zend_hash_key *)) 0x5e034b php_object_property_dump
#8 0x005e0b5f in zif_var_dump (ht=1, return_value=0x2b0afc0a5958,
return_value_ptr=0x0, this_ptr=0x0,
return_value_used=0) at /home/cristian/php-src/ext/standard/var.c:193
args = (zval ***) 0x2b0afc0a51c0
argc = 1
i = 0
#9 0x006a7cf6 in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffaeae4cd0)
at /home/cristian/php-src/Zend/zend_vm_execute.h:200
return_reference = 0 '\0'
opline = (zend_op *) 0x2b0afc0a2058
original_return_value = (zval **) 0x2b0afc0a52c0
current_scope = (zend_class_entry *) 0x0
current_this = (zval *) 0x0
return_value_used = 0
should_change_scope = 0 '\0'
ctor_opline = (zend_op *) 0x9006e8ddf
#10 0x006add96 in ZEND_DO_FCALL_SPEC_CONST_HANDLER
(execute_data=0x7fffaeae4cd0)
at /home/cristian/php-src/Zend/zend_vm_execute.h:1681
opline = (zend_op *) 0x2b0afc0a2058
fname = (zval *) 0x2b0afc0a2088
#11 0x006a7797 in execute (op_array=0x2b0afc0a18d8) at
/home/cristian/php-src/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x2b0afc0a2058, function_state =
{function_symbol_table = 0x2b0afc0a5520,
function = 0x96e050, reserved = {0x2b0afc0a1a08, 0x7fffaeae4d30,
0x67505e, 0x0}}, fbc = 0x0, op_array = 0x2b0afc0a18d8,
object = 0x0, Ts = 0x7fffaeae4b60, CVs = 0x7fffaeae4b40,
original_in_execution = 0 '\0', symbol_table = 0x93e168,
prev_execute_data = 0x0, old_error_reporting = 0x0}
#12 0x006817b2 in zend_execute_scripts (type=8, retval=0x0,
file_count=3) at /home/cristian/php-src/Zend/zend.c:1096
files = {{gp_offset = 40,
#37322 [NoF-Opn]: unable to link php to already installed mysql
ID: 37322 User updated by: raosid at rediffmail dot com Reported By: raosid at rediffmail dot com -Status: No Feedback +Status: Open Bug Type: *Configuration Issues Operating System: fedora core 4 PHP Version: 4.4.2 New Comment: this error can be fxed by compiling with --mysql-sock and then creating a link to mysql.sock in /var/lib/mysql Previous Comments: [2006-09-22 17:58:02] guglielmo dot celata at gmail dot com Hi, I am having the same issue, using php4.4.4 with mysql 5.0.22 on a FC5. I have installed the mysql and mysql-devel packages, using yum. Then, trying to compile, using: ./configure --with-apxs2=/usr/local/apache2/bin/apxs --with-mysql=/usr --disable-cgi --with-zlib --with-curl --with-gettext --with-iconv --enable-mbstring --enable-shmop --enable-sysvmsg --enable-sysvsem --enable-sysvshm --with-pear --with-gd --with-jpeg-dir --with-png-dir I receive the same error. I think this is a bug and it should be fixed. [2006-08-02 15:51:03] sorin at intersol dot ro OOps, My mistake. I think that the problem is that the compiled mysql in FC4 and FC5 may not include old functions?! Any suggestion not including the recompilation of mysql. [2006-08-02 15:47:27] sorin at intersol dot ro It seamns that you must define USE_OLD_FUNCTIONS before including mysql.h (At least in mysql 5 the missing functions are including only if USE_OLD_FUNCTIONS is defined). [2006-08-02 15:37:22] sorin at intersol dot ro I confirm this bug in Fedora Core 5. [2006-05-14 01:00:00] php-bugs at lists dot php dot net No feedback was provided for this bug for over a week, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to Open. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/37322 -- Edit this bug report at http://bugs.php.net/?id=37322edit=1
