#37554 [Opn->Bgs]: strange behavior of intval()

2006-05-22 Thread derick
 ID:   37554
 Updated by:   [EMAIL PROTECTED]
 Reported By:  hsunke at muenster dot de
-Status:   Open
+Status:   Bogus
 Bug Type: Math related
 Operating System: Debian Linux
 PHP Version:  5.1.4
 New Comment:

Might be funny... but it's still the same problem.


Previous Comments:


[2006-05-22 22:29:15] hsunke at muenster dot de

Description:

I know about "unpredictable" issues with floatingpoint calculations,
but this one is quite funny:

...
echo intval(100*(27/100));
//output: 27
echo intval(100*(28/100));
//output: 28
echo intval(100*(29/100));
//output: 28
echo intval(100*(30/100));
//output: 30
echo intval(100*(31/100));
//output: 31
...


Reproduce code:
---
echo intval(100*(29/100));


Expected result:

29

Actual result:
--
28





-- 
Edit this bug report at http://bugs.php.net/?id=37554&edit=1


#36862 [Com]: *** glibc detected *** double free or corruption

2006-05-22 Thread israel at ochosting dot com
 ID:   36862
 Comment by:   israel at ochosting dot com
 Reported By:  nick at sterlingintegrated dot com
 Status:   No Feedback
 Bug Type: MySQL related
 Operating System: Fedora Core 3 (FC3)
 PHP Version:  5.1.2
 New Comment:

Note from Googling...

http://www.redhat.com/archives/rhl-list/2005-January/msg01918.html


Previous Comments:


[2006-05-23 03:35:24] dmobley at uhostme dot net

Oh my God, I have been chasing this same error for days!  I did almost
the same thing, creating the test php page, etc. and MySQL/PHP kept
popping errors in the error log about glibc detected.

I ssh'ed to the server, did "export MALLOC_CHECK_=0" and when I would
run the php file from the command line, the error stopped.  However, I
then restarted httpd and the problem in the browser was still there. 
Is it not using the same environment variables that the ssh session is
using or is it only apply to the root user and not apache?

I guess what I need to do is recompile PHP without the Zend optimizer. 
Can someone please explain how I recompile PHP without the Zend
optimizer?



[2006-04-13 06:29:52] israel at ochosting dot com

I had this problem on something similar, It had to do i believe
something with Zend Optimizer, and an extension to Zend Optimizer
(eAccelerator).  A Recompile of the same version of PHP without the
Zend and the Extension allowed our affected pages to work.

I dont have the core dump files.  But this may help someone else get on
the right track.

(PS.. Cpanel/WHM Box, Apache 1.3x, and PHP 4.4.1)



[2006-04-03 01:00:05] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".



[2006-03-26 12:36:25] [EMAIL PROTECTED]

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php for *NIX and
http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.





[2006-03-26 12:19:57] nick at sterlingintegrated dot com

Description:

After an upgrade of MySQL from 3.23 to 4.0, I kept getting
"mysql_connect not a valid function call". So I recompiled php.


Then I got a blank scrren on the browser. When run, "~php ./test.php"
produces an error message (which can't be seen in the browser). The
solution for me was to "export MALLOC_CHECK=0;" on the command line, so
glibc stops going crazy then restart httpd. I set this env variable in
my .bash_profile. It seems to work fine so far.

Reproduce code:
---


Expected result:

Connected successfully

Actual result:
--
*** glibc detected *** double free or corruption





-- 
Edit this bug report at http://bugs.php.net/?id=36862&edit=1


#37557 [NEW]: Problem with open base, move_uploaded_file worked fine before now it doesnt.

2006-05-22 Thread jcink2k at gmail dot com
From: jcink2k at gmail dot com
Operating system: Windows XP SP2
PHP version:  4.4.3RC1
PHP Bug Type: Safe Mode/open_basedir
Bug description:  Problem with open base, move_uploaded_file worked fine before 
now it doesnt.

Description:

Hi, I am not sure if this is a bug or not, so I apologize if it's bogus.
But I'm having this issue in RC2 at the moment. RC1 is the only option
here so I have picked that.

I have open_basedir set to "."

Reproduce code:
---
$folder = "./uploads/";
$temporary = $_FILES['swforpic']['tmp_name'];
$realfilename = $_FILES['swforpic']['name'];

move_uploaded_file($temporary, $folder.$realfilename) or die("Problem
writing the file. ");

Worked fine for me on PHP 4.4.2

Expected result:

I expected the file to upload, as it does just fine in PHP 4.4.2 with
open_basedir set to "."

Actual result:
--
Warning: move_uploaded_file() [function.move-uploaded-file]: open_basedir
restriction in effect. File(C:\PROGRA~1\EASYPH~1\\tmp\phpED.tmp) is not
within the allowed path(s): (.) in c:\program
files\easyphp1-8\www\um\textfilebb_v1p0p17\add_reply.php on line 217

Don't know if this is a bug or not. But it was working just fine before,
which makes me think that it is somehow.

-- 
Edit bug report at http://bugs.php.net/?id=37557&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37557&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): 
http://bugs.php.net/fix.php?id=37557&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37557&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37557&r=fixedcvs
Fixed in release: 
http://bugs.php.net/fix.php?id=37557&r=alreadyfixed
Need backtrace:   http://bugs.php.net/fix.php?id=37557&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=37557&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=37557&r=oldversion
Not developer issue:  http://bugs.php.net/fix.php?id=37557&r=support
Expected behavior:http://bugs.php.net/fix.php?id=37557&r=notwrong
Not enough info:  
http://bugs.php.net/fix.php?id=37557&r=notenoughinfo
Submitted twice:  
http://bugs.php.net/fix.php?id=37557&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37557&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37557&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37557&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=37557&r=isapi
Install GNU Sed:  http://bugs.php.net/fix.php?id=37557&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37557&r=float
No Zend Extensions:   http://bugs.php.net/fix.php?id=37557&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=37557&r=mysqlcfg


#36862 [Com]: *** glibc detected *** double free or corruption

2006-05-22 Thread dmobley at uhostme dot net
 ID:   36862
 Comment by:   dmobley at uhostme dot net
 Reported By:  nick at sterlingintegrated dot com
 Status:   No Feedback
 Bug Type: MySQL related
 Operating System: Fedora Core 3 (FC3)
 PHP Version:  5.1.2
 New Comment:

Oh my God, I have been chasing this same error for days!  I did almost
the same thing, creating the test php page, etc. and MySQL/PHP kept
popping errors in the error log about glibc detected.

I ssh'ed to the server, did "export MALLOC_CHECK_=0" and when I would
run the php file from the command line, the error stopped.  However, I
then restarted httpd and the problem in the browser was still there. 
Is it not using the same environment variables that the ssh session is
using or is it only apply to the root user and not apache?

I guess what I need to do is recompile PHP without the Zend optimizer. 
Can someone please explain how I recompile PHP without the Zend
optimizer?


Previous Comments:


[2006-04-13 06:29:52] israel at ochosting dot com

I had this problem on something similar, It had to do i believe
something with Zend Optimizer, and an extension to Zend Optimizer
(eAccelerator).  A Recompile of the same version of PHP without the
Zend and the Extension allowed our affected pages to work.

I dont have the core dump files.  But this may help someone else get on
the right track.

(PS.. Cpanel/WHM Box, Apache 1.3x, and PHP 4.4.1)



[2006-04-03 01:00:05] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".



[2006-03-26 12:36:25] [EMAIL PROTECTED]

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php for *NIX and
http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.





[2006-03-26 12:19:57] nick at sterlingintegrated dot com

Description:

After an upgrade of MySQL from 3.23 to 4.0, I kept getting
"mysql_connect not a valid function call". So I recompiled php.


Then I got a blank scrren on the browser. When run, "~php ./test.php"
produces an error message (which can't be seen in the browser). The
solution for me was to "export MALLOC_CHECK=0;" on the command line, so
glibc stops going crazy then restart httpd. I set this env variable in
my .bash_profile. It seems to work fine so far.

Reproduce code:
---


Expected result:

Connected successfully

Actual result:
--
*** glibc detected *** double free or corruption





-- 
Edit this bug report at http://bugs.php.net/?id=36862&edit=1


#37556 [Opn]: file_exists does not properly resolve symlinks before applying open_basedir

2006-05-22 Thread phpdotnet at ericmarques dot com
 ID:   37556
 User updated by:  phpdotnet at ericmarques dot com
 Reported By:  phpdotnet at ericmarques dot com
 Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: FreeBSD 5.4
 PHP Version:  5.1.4
 New Comment:

Same problem with other functions too like file_get_contents.

Only happens where the file being performed on is in a sub folder of
the script being run.


Previous Comments:


[2006-05-23 02:48:15] phpdotnet at ericmarques dot com

Description:

file_exists does not properly resolve symlinks before applying
open_basedir on "include" scripts.

in my situation
/home is a symlink to /data/home

open_basedir is set to /home/ericmarq/
apache documentroot is set to /home/ericmarq/public_html

Server running cPanel, apache 1.3

This did not happen in php 4.4.2, only happened after upgrade to 5.1.2

Reproduce code:
---
-- test1.php --


-- test2.php --


Expected result:

no

Actual result:
--
Warning: file_exists() [function.file-exists]: open_basedir restriction
in effect. File(/home/ericmarq/public_html/SUBDIR/does.not.exist.html)
is not within the allowed path(s): (/home/ericmarq/) in
/data/home/ericmarq/public_html/test2.php on line 2
no





-- 
Edit this bug report at http://bugs.php.net/?id=37556&edit=1


#37556 [NEW]: file_exists does not properly resolve symlinks before applying open_basedir

2006-05-22 Thread phpdotnet at ericmarques dot com
From: phpdotnet at ericmarques dot com
Operating system: FreeBSD 5.4
PHP version:  5.1.4
PHP Bug Type: Safe Mode/open_basedir
Bug description:  file_exists does not properly resolve symlinks before 
applying open_basedir

Description:

file_exists does not properly resolve symlinks before applying
open_basedir on "include" scripts.

in my situation
/home is a symlink to /data/home

open_basedir is set to /home/ericmarq/
apache documentroot is set to /home/ericmarq/public_html

Server running cPanel, apache 1.3

This did not happen in php 4.4.2, only happened after upgrade to 5.1.2

Reproduce code:
---
-- test1.php --


-- test2.php --


Expected result:

no

Actual result:
--
Warning: file_exists() [function.file-exists]: open_basedir restriction in
effect. File(/home/ericmarq/public_html/SUBDIR/does.not.exist.html) is not
within the allowed path(s): (/home/ericmarq/) in
/data/home/ericmarq/public_html/test2.php on line 2
no

-- 
Edit bug report at http://bugs.php.net/?id=37556&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37556&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): 
http://bugs.php.net/fix.php?id=37556&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37556&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37556&r=fixedcvs
Fixed in release: 
http://bugs.php.net/fix.php?id=37556&r=alreadyfixed
Need backtrace:   http://bugs.php.net/fix.php?id=37556&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=37556&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=37556&r=oldversion
Not developer issue:  http://bugs.php.net/fix.php?id=37556&r=support
Expected behavior:http://bugs.php.net/fix.php?id=37556&r=notwrong
Not enough info:  
http://bugs.php.net/fix.php?id=37556&r=notenoughinfo
Submitted twice:  
http://bugs.php.net/fix.php?id=37556&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37556&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37556&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37556&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=37556&r=isapi
Install GNU Sed:  http://bugs.php.net/fix.php?id=37556&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37556&r=float
No Zend Extensions:   http://bugs.php.net/fix.php?id=37556&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=37556&r=mysqlcfg


#37555 [NEW]: chdir() does not use file protocol stream wrappers

2006-05-22 Thread jb at jbpros dot com
From: jb at jbpros dot com
Operating system: GNU/Linux Gentoo
PHP version:  5.1.4
PHP Bug Type: Streams related
Bug description:  chdir() does not use file protocol stream wrappers

Description:

chdir() seems to not use streams to validate the passed path. When one
defines a custom wrapper for the file:// scheme, it can be problematic.

For example, my custom file:// wrapper is acting like a root jail, "/"
being mapped to some directory on disk. This was needed to prevent XML
documents xinclude()'ing stuffs outside of the authorized directory, among
other things. It works very well except that I'm forced to set the CWD to
"/" as other jailed directories are reported as "not found" by PHP.

Example:

If "/srv/www/jail" is the root jail "/srv/www/jail/data/file.xml" is
accessible within the script under the path "/data/file.xml". There I have
no way to set the CWD to /data if the real on-disk "/data" path doesn't
exist.

Maybe this behavior should not change for some reason, but this is a use
case where it would be nice.


-- 
Edit bug report at http://bugs.php.net/?id=37555&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37555&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): 
http://bugs.php.net/fix.php?id=37555&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37555&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37555&r=fixedcvs
Fixed in release: 
http://bugs.php.net/fix.php?id=37555&r=alreadyfixed
Need backtrace:   http://bugs.php.net/fix.php?id=37555&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=37555&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=37555&r=oldversion
Not developer issue:  http://bugs.php.net/fix.php?id=37555&r=support
Expected behavior:http://bugs.php.net/fix.php?id=37555&r=notwrong
Not enough info:  
http://bugs.php.net/fix.php?id=37555&r=notenoughinfo
Submitted twice:  
http://bugs.php.net/fix.php?id=37555&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37555&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37555&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37555&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=37555&r=isapi
Install GNU Sed:  http://bugs.php.net/fix.php?id=37555&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37555&r=float
No Zend Extensions:   http://bugs.php.net/fix.php?id=37555&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=37555&r=mysqlcfg


#37554 [NEW]: strange behavior of intval()

2006-05-22 Thread hsunke at muenster dot de
From: hsunke at muenster dot de
Operating system: Debian Linux
PHP version:  5.1.4
PHP Bug Type: Math related
Bug description:  strange behavior of intval()

Description:

I know about "unpredictable" issues with floatingpoint calculations, but
this one is quite funny:

...
echo intval(100*(27/100));
//output: 27
echo intval(100*(28/100));
//output: 28
echo intval(100*(29/100));
//output: 28
echo intval(100*(30/100));
//output: 30
echo intval(100*(31/100));
//output: 31
...


Reproduce code:
---
echo intval(100*(29/100));


Expected result:

29

Actual result:
--
28

-- 
Edit bug report at http://bugs.php.net/?id=37554&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37554&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): 
http://bugs.php.net/fix.php?id=37554&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37554&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37554&r=fixedcvs
Fixed in release: 
http://bugs.php.net/fix.php?id=37554&r=alreadyfixed
Need backtrace:   http://bugs.php.net/fix.php?id=37554&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=37554&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=37554&r=oldversion
Not developer issue:  http://bugs.php.net/fix.php?id=37554&r=support
Expected behavior:http://bugs.php.net/fix.php?id=37554&r=notwrong
Not enough info:  
http://bugs.php.net/fix.php?id=37554&r=notenoughinfo
Submitted twice:  
http://bugs.php.net/fix.php?id=37554&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37554&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37554&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37554&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=37554&r=isapi
Install GNU Sed:  http://bugs.php.net/fix.php?id=37554&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37554&r=float
No Zend Extensions:   http://bugs.php.net/fix.php?id=37554&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=37554&r=mysqlcfg


#37531 [Opn]: Persistent connection corruption

2006-05-22 Thread jreed at myers dot com
 ID:   37531
 User updated by:  jreed at myers dot com
 Reported By:  jreed at myers dot com
 Status:   Open
 Bug Type: OCI8 related
 Operating System: Linux - 386
 PHP Version:  5.1.4
 New Comment:

Error should read:

Warning: ociparse(): supplied resource is not a valid oci8 connection
resource in page2.html on line 7

Warning: ocilogoff(): supplied resource is not a valid oci8 connection
resource in page2.html on line 8


Previous Comments:


[2006-05-19 22:29:13] jreed at myers dot com

Description:

If you open a persistent connection on one page, then on another page
you open a file using fopen, thus creating a file resource, and then
attempt to obtain a persistent oci8 connection using ociplogon(), the
returned resource is not a valid oci8 connection resource.  If you then
attempt to use that connection resource you get the following warning:

"supplied resource is not a valid oci8 connection resource"

If you close the file using fclose() prior to calling ociplogon() then
everything works fine.

This problem was introduced in v5.1.3 and continues in 5.1.4.


Reproduce code:
---
page1.html


page2.html



Expected result:

Page redirects to second page and get a blank page.

Actual result:
--
Warning: ociparse(): supplied resource is not a valid oci8 connection
resource in /www/myers/sites/portal/main/orders/test2.html on line 7

Warning: ocilogoff(): supplied resource is not a valid oci8 connection
resource in /www/myers/sites/portal/main/orders/test2.html on line 8






-- 
Edit this bug report at http://bugs.php.net/?id=37531&edit=1


#37548 [Opn]: php-win.exe does a chrash/dump everytime

2006-05-22 Thread ryan_huff at knl dot cc
 ID:   37548
 User updated by:  ryan_huff at knl dot cc
 Reported By:  ryan_huff at knl dot cc
 Status:   Open
 Bug Type: Reproducible crash
 Operating System: Win XP SP2
 PHP Version:  5.1.4
 New Comment:

Interestingly enough, I just tried the same process with the lateest
5.2 snap and I don't get any errors whatsoever as opposed to the 5.1.4
php-win.exe binary which gave a crash error everytime


Previous Comments:


[2006-05-22 16:29:00] ryan_huff at knl dot cc

I have done as instructed to generate the back trace.  When I go into
Visual C it gives me the disassembly view - from there I choose to view
the call stack and all I get is:

PHP5TS! 100d5cf9()

Is this correct or did I do something wrong?



[2006-05-22 12:34:13] [EMAIL PROTECTED]

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php for *NIX and
http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.





[2006-05-22 12:09:48] ryan_huff at knl dot cc

Description:

When I attempt to execute php-win.exe from the command line environment
I receive a CLI error everytime.  This happens wether or not I pass any
command line parms or just execute php-win.exe by itself.  PHP-win.exe
will execute the parms, but then it will give the error after it
executes - everytime without fail.

I have posted the contents of the initial CLI error window but it
causes some weird XML process dump - so I have that if you would like
to see it.

Reproduce code:
---
php-win.exe

Error Signature:
AppName: php-win.exe AppVer: 5.1.4.4 ModName: unknown
ModVer: 0.0.0.0  Offset: 01011590



Expected result:

It should execute without error

Actual result:
--
php-win.exe does execute the parms that you pass it, after it has
executed then it will give the error.





-- 
Edit this bug report at http://bugs.php.net/?id=37548&edit=1


#37548 [Fbk->Opn]: php-win.exe does a chrash/dump everytime

2006-05-22 Thread ryan_huff at knl dot cc
 ID:   37548
 User updated by:  ryan_huff at knl dot cc
 Reported By:  ryan_huff at knl dot cc
-Status:   Feedback
+Status:   Open
 Bug Type: Reproducible crash
 Operating System: Win XP SP2
 PHP Version:  5.1.4
 New Comment:

I have done as instructed to generate the back trace.  When I go into
Visual C it gives me the disassembly view - from there I choose to view
the call stack and all I get is:

PHP5TS! 100d5cf9()

Is this correct or did I do something wrong?


Previous Comments:


[2006-05-22 12:34:13] [EMAIL PROTECTED]

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php for *NIX and
http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.





[2006-05-22 12:09:48] ryan_huff at knl dot cc

Description:

When I attempt to execute php-win.exe from the command line environment
I receive a CLI error everytime.  This happens wether or not I pass any
command line parms or just execute php-win.exe by itself.  PHP-win.exe
will execute the parms, but then it will give the error after it
executes - everytime without fail.

I have posted the contents of the initial CLI error window but it
causes some weird XML process dump - so I have that if you would like
to see it.

Reproduce code:
---
php-win.exe

Error Signature:
AppName: php-win.exe AppVer: 5.1.4.4 ModName: unknown
ModVer: 0.0.0.0  Offset: 01011590



Expected result:

It should execute without error

Actual result:
--
php-win.exe does execute the parms that you pass it, after it has
executed then it will give the error.





-- 
Edit this bug report at http://bugs.php.net/?id=37548&edit=1


#37549 [Bgs]: continue with while/do-while

2006-05-22 Thread violetphp at yahoo dot co dot jp
 ID:   37549
 User updated by:  violetphp at yahoo dot co dot jp
 Reported By:  violetphp at yahoo dot co dot jp
 Status:   Bogus
 Bug Type: *General Issues
 Operating System: windowsXP
 PHP Version:  5.1.4
 New Comment:

Dear mgf and Johannes.

Thank you so.
I understood why.
It is just my mistake...

Best wishes.


Previous Comments:


[2006-05-22 15:14:49] [EMAIL PROTECTED]

Of course you can -- and you are. The behaviour you are getting is
expected. This is a support issue, not a bug, so try asking in the
php-general list (but, hint: think about when your ++ increment is
happening).



[2006-05-22 14:20:37] violetphp at yahoo dot co dot jp

Thank you for your reply,Johannes!

I know 'break',of course.
But,'break' means the other.
Can't I continue the loop?

Thanks.

Best Regards.



[2006-05-22 13:59:40] [EMAIL PROTECTED]

Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

Maybe you want \"break\" isntead of \"continue\".



[2006-05-22 13:55:04] violetphp at yahoo dot co dot jp

Description:

Cannot use continue keyword with while/do-while.


Reproduce code:
---
$a = 0;
do{
if($a == 5)
continue;
print "$a";
$a++;
}while($a < 10);

//OR

$b = 0;
while($b < 10){
if($b == 5)
continue;
print "$b";
$b++;
}

Expected result:

012346789012346789

Actual result:
--
Timeout...





-- 
Edit this bug report at http://bugs.php.net/?id=37549&edit=1


#37550 [Opn->Bgs]: preg_match has string size limit

2006-05-22 Thread pajoye
 ID:   37550
 Updated by:   [EMAIL PROTECTED]
 Reported By:  Arne dot Heizmann at csr dot com
-Status:   Open
+Status:   Bogus
 Bug Type: Regexps related
 Operating System: Windows 2000
 PHP Version:  5.1.4
 New Comment:

Sorry, but your problem does not imply a bug in PHP itself.  For a
list of more appropriate places to ask for help using PHP, please
visit http://www.php.net/support.php as this bug system is not the
appropriate forum for asking support questions.  Due to the volume
of reports we can not explain in detail here why your report is not
a bug.  The support channels will be able to provide an explanation
for you.

Thank you for your interest in PHP.

You reached the backtrace limit (BACKTRACE_LIMIT_ERROR).

With php 5.2 and up (cvs only yet), you can check the last preg error
with preg_last_error.


Previous Comments:


[2006-05-22 15:12:56] Arne dot Heizmann at csr dot com

Description:

preg_match() stops working properly at some minimum string length.

Reproduce code:
---



Expected result:

"Correct Correct "

Actual result:
--
"Correct Wrong "





-- 
Edit this bug report at http://bugs.php.net/?id=37550&edit=1


#37547 [Csd]: PHP Crashes when attempting to load include via http.

2006-05-22 Thread web at digrel dot com
 ID:   37547
 User updated by:  web at digrel dot com
 Reported By:  web at digrel dot com
 Status:   Closed
 Bug Type: IIS related
 Operating System: Windows Server 2003 Web Ed.
 PHP Version:  4.4.2
 New Comment:

That's strange because I was using the latest CVS when it happened and
didn't find anything matching this bug on the web site.


Previous Comments:


[2006-05-22 12:35:27] [EMAIL PROTECTED]

This issue has been reported 20+ times already and it's fixed in CVS
long ago.
Thanks you for this bug report.




[2006-05-22 11:51:02] web at digrel dot com

Description:

Installed PHP 4.4.0 attempted PHP as ISAPI and CGI with same result. 
When attempting to access PHP files which contained includes similar to
the following:
include 'http://www.example.com/file.php?foo=1&bar=2';
IIS 6.0 application space for the particular site crashes and stops
processing requests.

Reproduce code:
---
// index.php
include 'http://www.domain.com/file.php?foo=1&bar=2';

// file.php
echo $_GET[ 'foo' ];

Expected result:

Expected to see the variable foo printed as 1.

Actual result:
--
ISAPI: When accessing the page from a browser the web site never
responds eventually times out and no more PHP pages load after that
until a restart of IIS.
CGI: When accessing the page from a browser the web site never responds
eventually times out.  
I don't remember if IIS needed restarted after this because it was a
production server and I had to downgrade to 4.4.0 which fixed the
problem.  However, now I am experiencing trouble with the per-directory
entries for magic_quotes_gpc() so I would like to upgrade to the fixed
version.






-- 
Edit this bug report at http://bugs.php.net/?id=37547&edit=1


#36959 [Com]: ReadRecords Method (Crystal Reports XI) Hangs

2006-05-22 Thread i_geber at hotmail dot com
 ID:   36959
 Comment by:   i_geber at hotmail dot com
 Reported By:  djogopatrao at gmail dot com
 Status:   Open
 Bug Type: COM related
 Operating System: Windows XP
 PHP Version:  5.1.2
 New Comment:

If I would like to call a report that has parameters, how do I write
the syntax?

thanks


Previous Comments:


[2006-04-03 15:41:05] djogopatrao at gmail dot com

I modified slightly the code (see below, I called it hang.php)

Running thru apache2, it hangs. No response from the browser  (it's
still "loading", started 2h ago). No entries in "error.log" since then.
Commenting the $creport->ReadRecords(); line, it works.


But when running by PHP CLI

C:\>"Arquivos de programas\Apache Group\Apache2\bin\php.exe" hang.php

C:\>


It runs just fine!


- hang.php

$my_report = 'C:\Arquivos de programas\Apache
Group\Apache2\htdocs\webdisc\relatorios\cadastro1.rpt';
$my_pdf = 'c:\18530.pdf';

$ObjectFactory= New COM("CrystalReports115.ObjectFactory.1");
$crapp =
$ObjectFactory->CreateObject("CrystalDesignRunTime.Application");
$creport = $crapp->OpenReport($my_report, 1);
$creport->ReadRecords(); //hangs here, not thru PHPCLI
$creport->ExportOptions->DiskFileName=$my_pdf;
$creport->ExportOptions->PDFExportAllPages=true;
$creport->ExportOptions->DestinationType=1; // Export to File
$creport->ExportOptions->FormatType=31; // Type: PDF
$creport->Export(false);



[2006-04-03 14:49:18] [EMAIL PROTECTED]

Error log entries related to the problem would be more helpful than
just "hangs".
Also, you can try to run the same code with PHP CLI and check for any
error messages.



[2006-04-03 14:33:24] djogopatrao at gmail dot com

When I say that it hangs, I mean that the browser keeps on loading the
page forever, until it gets timeout.

More information? I would gladly give an example report file, but as it
depends on a database server and ODBC configuration, I don't know how to
proceed.

Please contact me if is there anything that I can do.

dfcp



[2006-04-03 14:23:03] [EMAIL PROTECTED]

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to "Open".

Thank you for your interest in PHP.


Please define "hangs" and add more information if possible.



[2006-04-03 14:10:35] djogopatrao at gmail dot com

Description:

In order to verify this, you need 

1) crystal reports XI version 2 (free download for trial at
www.businessobjects.com)

2) access to a database

3) a report that uses data from this database

the code above hangs when invoking the ReadRecords method. A equivalent
code was tested and worked OK under Visual Fox Pro.

thanks

dfcp



Reproduce code:
---
$my_report = "c:\\report1.rpt";
$my_pdf = "c:\\report1.pdf";

$ObjectFactory= New COM("CrystalReports115.ObjectFactory.1");
$crapp =
$ObjectFactory->CreateObject("CrystalDesignRunTime.Application");
$creport = $crapp->OpenReport($my_report, 1);
$creport->ReadRecords(); //hangs here
$creport->ExportOptions->DiskFileName=$my_pdf;
$creport->ExportOptions->PDFExportAllPages=true;
$creport->ExportOptions->DestinationType=1; // Export to File
$creport->ExportOptions->FormatType=31; // Type: PDF
$creport->Export(false);

Expected result:

It would create a file (name $my_pdf) with the report. 

Actual result:
--
It hangs.





-- 
Edit this bug report at http://bugs.php.net/?id=36959&edit=1


#37549 [Bgs]: continue with while/do-while

2006-05-22 Thread mgf
 ID:   37549
 Updated by:   [EMAIL PROTECTED]
 Reported By:  violetphp at yahoo dot co dot jp
 Status:   Bogus
 Bug Type: *General Issues
 Operating System: windowsXP
 PHP Version:  5.1.4
 New Comment:

Of course you can -- and you are. The behaviour you are getting is
expected. This is a support issue, not a bug, so try asking in the
php-general list (but, hint: think about when your ++ increment is
happening).


Previous Comments:


[2006-05-22 14:20:37] violetphp at yahoo dot co dot jp

Thank you for your reply,Johannes!

I know 'break',of course.
But,'break' means the other.
Can't I continue the loop?

Thanks.

Best Regards.



[2006-05-22 13:59:40] [EMAIL PROTECTED]

Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

Maybe you want \"break\" isntead of \"continue\".



[2006-05-22 13:55:04] violetphp at yahoo dot co dot jp

Description:

Cannot use continue keyword with while/do-while.


Reproduce code:
---
$a = 0;
do{
if($a == 5)
continue;
print "$a";
$a++;
}while($a < 10);

//OR

$b = 0;
while($b < 10){
if($b == 5)
continue;
print "$b";
$b++;
}

Expected result:

012346789012346789

Actual result:
--
Timeout...





-- 
Edit this bug report at http://bugs.php.net/?id=37549&edit=1


#37550 [NEW]: preg_match has string size limit

2006-05-22 Thread Arne dot Heizmann at csr dot com
From: Arne dot Heizmann at csr dot com
Operating system: Windows 2000
PHP version:  5.1.4
PHP Bug Type: Regexps related
Bug description:  preg_match has string size limit

Description:

preg_match() stops working properly at some minimum string length.

Reproduce code:
---



Expected result:

"Correct Correct "

Actual result:
--
"Correct Wrong "

-- 
Edit bug report at http://bugs.php.net/?id=37550&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37550&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): 
http://bugs.php.net/fix.php?id=37550&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37550&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37550&r=fixedcvs
Fixed in release: 
http://bugs.php.net/fix.php?id=37550&r=alreadyfixed
Need backtrace:   http://bugs.php.net/fix.php?id=37550&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=37550&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=37550&r=oldversion
Not developer issue:  http://bugs.php.net/fix.php?id=37550&r=support
Expected behavior:http://bugs.php.net/fix.php?id=37550&r=notwrong
Not enough info:  
http://bugs.php.net/fix.php?id=37550&r=notenoughinfo
Submitted twice:  
http://bugs.php.net/fix.php?id=37550&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37550&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37550&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37550&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=37550&r=isapi
Install GNU Sed:  http://bugs.php.net/fix.php?id=37550&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37550&r=float
No Zend Extensions:   http://bugs.php.net/fix.php?id=37550&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=37550&r=mysqlcfg


#37549 [Bgs]: continue with while/do-while

2006-05-22 Thread violetphp at yahoo dot co dot jp
 ID:   37549
 User updated by:  violetphp at yahoo dot co dot jp
 Reported By:  violetphp at yahoo dot co dot jp
 Status:   Bogus
 Bug Type: *General Issues
 Operating System: windowsXP
 PHP Version:  5.1.4
 New Comment:

Thank you for your reply,Johannes!

I know 'break',of course.
But,'break' means the other.
Can't I continue the loop?

Thanks.

Best Regards.


Previous Comments:


[2006-05-22 13:59:40] [EMAIL PROTECTED]

Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

Maybe you want \"break\" isntead of \"continue\".



[2006-05-22 13:55:04] violetphp at yahoo dot co dot jp

Description:

Cannot use continue keyword with while/do-while.


Reproduce code:
---
$a = 0;
do{
if($a == 5)
continue;
print "$a";
$a++;
}while($a < 10);

//OR

$b = 0;
while($b < 10){
if($b == 5)
continue;
print "$b";
$b++;
}

Expected result:

012346789012346789

Actual result:
--
Timeout...





-- 
Edit this bug report at http://bugs.php.net/?id=37549&edit=1


#37549 [Opn->Bgs]: continue with while/do-while

2006-05-22 Thread johannes
 ID:   37549
 Updated by:   [EMAIL PROTECTED]
 Reported By:  violetphp at yahoo dot co dot jp
-Status:   Open
+Status:   Bogus
 Bug Type: *General Issues
 Operating System: windowsXP
 PHP Version:  5.1.4
 New Comment:

Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

Maybe you want "break" isntead of "continue".


Previous Comments:


[2006-05-22 13:55:04] violetphp at yahoo dot co dot jp

Description:

Cannot use continue keyword with while/do-while.


Reproduce code:
---
$a = 0;
do{
if($a == 5)
continue;
print "$a";
$a++;
}while($a < 10);

//OR

$b = 0;
while($b < 10){
if($b == 5)
continue;
print "$b";
$b++;
}

Expected result:

012346789012346789

Actual result:
--
Timeout...





-- 
Edit this bug report at http://bugs.php.net/?id=37549&edit=1


#37549 [NEW]: continue with while/do-while

2006-05-22 Thread violetphp at yahoo dot co dot jp
From: violetphp at yahoo dot co dot jp
Operating system: windowsXP
PHP version:  5.1.4
PHP Bug Type: *General Issues
Bug description:  continue with while/do-while 

Description:

Cannot use continue keyword with while/do-while.


Reproduce code:
---
$a = 0;
do{
if($a == 5)
continue;
print "$a";
$a++;
}while($a < 10);

//OR

$b = 0;
while($b < 10){
if($b == 5)
continue;
print "$b";
$b++;
}

Expected result:

012346789012346789

Actual result:
--
Timeout...

-- 
Edit bug report at http://bugs.php.net/?id=37549&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37549&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): 
http://bugs.php.net/fix.php?id=37549&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37549&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37549&r=fixedcvs
Fixed in release: 
http://bugs.php.net/fix.php?id=37549&r=alreadyfixed
Need backtrace:   http://bugs.php.net/fix.php?id=37549&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=37549&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=37549&r=oldversion
Not developer issue:  http://bugs.php.net/fix.php?id=37549&r=support
Expected behavior:http://bugs.php.net/fix.php?id=37549&r=notwrong
Not enough info:  
http://bugs.php.net/fix.php?id=37549&r=notenoughinfo
Submitted twice:  
http://bugs.php.net/fix.php?id=37549&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37549&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37549&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37549&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=37549&r=isapi
Install GNU Sed:  http://bugs.php.net/fix.php?id=37549&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37549&r=float
No Zend Extensions:   http://bugs.php.net/fix.php?id=37549&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=37549&r=mysqlcfg


#37547 [Opn->Csd]: PHP Crashes when attempting to load include via http.

2006-05-22 Thread tony2001
 ID:   37547
 Updated by:   [EMAIL PROTECTED]
 Reported By:  web at digrel dot com
-Status:   Open
+Status:   Closed
 Bug Type: IIS related
 Operating System: Windows Server 2003 Web Ed.
 PHP Version:  4.4.2
 New Comment:

This issue has been reported 20+ times already and it's fixed in CVS
long ago.
Thanks you for this bug report.



Previous Comments:


[2006-05-22 11:51:02] web at digrel dot com

Description:

Installed PHP 4.4.0 attempted PHP as ISAPI and CGI with same result. 
When attempting to access PHP files which contained includes similar to
the following:
include 'http://www.example.com/file.php?foo=1&bar=2';
IIS 6.0 application space for the particular site crashes and stops
processing requests.

Reproduce code:
---
// index.php
include 'http://www.domain.com/file.php?foo=1&bar=2';

// file.php
echo $_GET[ 'foo' ];

Expected result:

Expected to see the variable foo printed as 1.

Actual result:
--
ISAPI: When accessing the page from a browser the web site never
responds eventually times out and no more PHP pages load after that
until a restart of IIS.
CGI: When accessing the page from a browser the web site never responds
eventually times out.  
I don't remember if IIS needed restarted after this because it was a
production server and I had to downgrade to 4.4.0 which fixed the
problem.  However, now I am experiencing trouble with the per-directory
entries for magic_quotes_gpc() so I would like to upgrade to the fixed
version.






-- 
Edit this bug report at http://bugs.php.net/?id=37547&edit=1


#37548 [Opn->Fbk]: php-win.exe does a chrash/dump everytime

2006-05-22 Thread tony2001
 ID:   37548
 Updated by:   [EMAIL PROTECTED]
 Reported By:  ryan_huff at knl dot cc
-Status:   Open
+Status:   Feedback
 Bug Type: Reproducible crash
 Operating System: Win XP SP2
 PHP Version:  5.1.4
 New Comment:

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php for *NIX and
http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.




Previous Comments:


[2006-05-22 12:09:48] ryan_huff at knl dot cc

Description:

When I attempt to execute php-win.exe from the command line environment
I receive a CLI error everytime.  This happens wether or not I pass any
command line parms or just execute php-win.exe by itself.  PHP-win.exe
will execute the parms, but then it will give the error after it
executes - everytime without fail.

I have posted the contents of the initial CLI error window but it
causes some weird XML process dump - so I have that if you would like
to see it.

Reproduce code:
---
php-win.exe

Error Signature:
AppName: php-win.exe AppVer: 5.1.4.4 ModName: unknown
ModVer: 0.0.0.0  Offset: 01011590



Expected result:

It should execute without error

Actual result:
--
php-win.exe does execute the parms that you pass it, after it has
executed then it will give the error.





-- 
Edit this bug report at http://bugs.php.net/?id=37548&edit=1


#37548 [NEW]: php-win.exe does a chrash/dump everytime

2006-05-22 Thread ryan_huff at knl dot cc
From: ryan_huff at knl dot cc
Operating system: Win XP SP2
PHP version:  5.1.4
PHP Bug Type: Reproducible crash
Bug description:  php-win.exe does a chrash/dump everytime

Description:

When I attempt to execute php-win.exe from the command line environment I
receive a CLI error everytime.  This happens wether or not I pass any
command line parms or just execute php-win.exe by itself.  PHP-win.exe
will execute the parms, but then it will give the error after it executes
- everytime without fail.

I have posted the contents of the initial CLI error window but it causes
some weird XML process dump - so I have that if you would like to see it.

Reproduce code:
---
php-win.exe

Error Signature:
AppName: php-win.exe AppVer: 5.1.4.4 ModName: unknown
ModVer: 0.0.0.0  Offset: 01011590



Expected result:

It should execute without error

Actual result:
--
php-win.exe does execute the parms that you pass it, after it has executed
then it will give the error.

-- 
Edit bug report at http://bugs.php.net/?id=37548&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37548&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): 
http://bugs.php.net/fix.php?id=37548&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37548&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37548&r=fixedcvs
Fixed in release: 
http://bugs.php.net/fix.php?id=37548&r=alreadyfixed
Need backtrace:   http://bugs.php.net/fix.php?id=37548&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=37548&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=37548&r=oldversion
Not developer issue:  http://bugs.php.net/fix.php?id=37548&r=support
Expected behavior:http://bugs.php.net/fix.php?id=37548&r=notwrong
Not enough info:  
http://bugs.php.net/fix.php?id=37548&r=notenoughinfo
Submitted twice:  
http://bugs.php.net/fix.php?id=37548&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37548&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37548&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37548&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=37548&r=isapi
Install GNU Sed:  http://bugs.php.net/fix.php?id=37548&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37548&r=float
No Zend Extensions:   http://bugs.php.net/fix.php?id=37548&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=37548&r=mysqlcfg


#37547 [NEW]: PHP Crashes when attempting to load include via http.

2006-05-22 Thread web at digrel dot com
From: web at digrel dot com
Operating system: Windows Server 2003 Web Ed.
PHP version:  4.4.2
PHP Bug Type: IIS related
Bug description:  PHP Crashes when attempting to load include via http.

Description:

Installed PHP 4.4.0 attempted PHP as ISAPI and CGI with same result.  When
attempting to access PHP files which contained includes similar to the
following:
include 'http://www.example.com/file.php?foo=1&bar=2';
IIS 6.0 application space for the particular site crashes and stops
processing requests.

Reproduce code:
---
// index.php
include 'http://www.domain.com/file.php?foo=1&bar=2';

// file.php
echo $_GET[ 'foo' ];

Expected result:

Expected to see the variable foo printed as 1.

Actual result:
--
ISAPI: When accessing the page from a browser the web site never responds
eventually times out and no more PHP pages load after that until a restart
of IIS.
CGI: When accessing the page from a browser the web site never responds
eventually times out.  
I don't remember if IIS needed restarted after this because it was a
production server and I had to downgrade to 4.4.0 which fixed the problem.
 However, now I am experiencing trouble with the per-directory entries for
magic_quotes_gpc() so I would like to upgrade to the fixed version.


-- 
Edit bug report at http://bugs.php.net/?id=37547&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37547&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): 
http://bugs.php.net/fix.php?id=37547&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37547&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37547&r=fixedcvs
Fixed in release: 
http://bugs.php.net/fix.php?id=37547&r=alreadyfixed
Need backtrace:   http://bugs.php.net/fix.php?id=37547&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=37547&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=37547&r=oldversion
Not developer issue:  http://bugs.php.net/fix.php?id=37547&r=support
Expected behavior:http://bugs.php.net/fix.php?id=37547&r=notwrong
Not enough info:  
http://bugs.php.net/fix.php?id=37547&r=notenoughinfo
Submitted twice:  
http://bugs.php.net/fix.php?id=37547&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37547&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37547&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37547&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=37547&r=isapi
Install GNU Sed:  http://bugs.php.net/fix.php?id=37547&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37547&r=float
No Zend Extensions:   http://bugs.php.net/fix.php?id=37547&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=37547&r=mysqlcfg


#37428 [Opn]: php.exe crashing if unable to load any of configured extension dll

2006-05-22 Thread velkran-2 at yahoo dot com
 ID:   37428
 User updated by:  velkran-2 at yahoo dot com
 Reported By:  velkran-2 at yahoo dot com
 Status:   Open
 Bug Type: *General Issues
 Operating System: Windows XP SP2
 PHP Version:  5.1.4
 New Comment:

The workaround for this issue - is not use event log (on Windows)


Previous Comments:


[2006-05-22 09:29:38] velkran-2 at yahoo dot com

I was able to reproduce this problem on latest 5.2 snapshot



[2006-05-16 19:07:31] velkran-2 at yahoo dot com

Just to be sure, i did these steps:
1. Download php5.2-win32-200605161430.zip
2. Download php5.2-dbgpack-win32-latest.zip
3. unpack these 2 files to e:\php5.2
4. copy php.ini-recommended to php.ini
5. edit php.ini, uncomment line ;error_log = syslog
6. edit php.ini (to emulate "PHP Startup: Unable to load dynamic
library" error)
Before:
;extension=php_bz2.dll
To:
extension=xphp_bz2.dll
7. change current directory to e:\php5.2
8. start php.exe
9. got usual windows GPF message, click "Debug" to create backtrace
Please find a Backtrace at the end of this comment.

As far as i can see there is some problem with windows event log
reporting, basically it failes at this line:
/* default event source */
--->if (!PW32G(log_source))
openlog("php", LOG_PID, LOG_SYSLOG);
I'm pretty that openlog was not called yet, i put a breakpoint on it.
So failing somewhere inside mystical PW32G thing.
Hope this will be help.

A Backtrace (hope you will see it well-formatted):
>   php5ts.dll!syslog(int priority=6, const char * 
message=0x102a6814,
...)  Line 91   C
php5ts.dll!php_log_err(char * log_message=0x009b1080, void * * *
tsrm_ls=0x00324200)  Line 349 + 0x14C
php5ts.dll!php_error_cb(int type=32, const char *
error_filename=0x102967d0, const unsigned int error_lineno=0, const
char * format=0x009b1080, char * args=0x0001)  Line 763 C
php5ts.dll!zend_error(int type=32, const char * format=0x10296780,
...)  Line 948 + 0x17   C
php5ts.dll!php_verror(const char * docref=0x, const char *
params=0x10296690, int type=32, const char * format=0x000b, char *
args=0x006d, void * * * tsrm_ls=0x)  Line 573   C
php5ts.dll!php_error_docref0(const char * docref=0x, void * *
* tsrm_ls=0x00324200, int type=32, const char * format=0x10307754, ...) 
Line 588 + 0x23 C
php5ts.dll!php_dl(_zval_struct * file=0x009f5610, int type=1,
_zval_struct * return_value=0x0012fbe4, int start_now=0, void * * *
tsrm_ls=0x00324200)  Line 142 + 0x26C
php5ts.dll!php_load_function_extension_cb(void * arg=0x009f5610, void
* * * tsrm_ls=0x00324200)  Line 236 C
php5ts.dll!zend_llist_apply(_zend_llist * l=0x104366d4, void (void *,
void * * *)* func=0x100bcb50, void * * * tsrm_ls=0x00324200)  Line 191 +
0x7 C
php5ts.dll!php_ini_register_extensions(void * * * tsrm_ls=0x00324200)
 Line 555   C
php5ts.dll!php_module_startup(_sapi_module_struct * sf=0x00405020,
_zend_module_entry * additional_modules=0x, unsigned int
num_additional_modules=0)  Line 1563C
php.exe!main(int argc=64, char * * argv=0x7ffde000)  Line 681 +
0x12C
ntdll.dll!7c915b4f()
ntdll.dll!7c9131dc()
ntdll.dll!7c913212()
ntdll.dll!7c913281()
ntdll.dll!7c913288()
ntdll.dll!7c913288()
ntdll.dll!7c9106eb()
msvcrt.dll!77c2c3c9()   
msvcrt.dll!77c2c3ce()   
ntdll.dll!7c915b4f()
msvcrt.dll!77c3ac5f()   
php.exe!_mainCRTStartup()  + 0xe3   
ntdll.dll!7c915b4f()
kernel32.dll!7c816d4f() 
ntdll.dll!7c915b4f()
kernel32.dll!7c8399f3()



[2006-05-14 12:31:05] [EMAIL PROTECTED]

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to "Open".

Thank you for your interest in PHP.






[2006-05-13 10:43:27] velkran-2 at yahoo dot com

Description:

php.exe will crash if any of configured extension dll cannot be found.
It can either incorrect extension_dir or just missing dll file.
>From my point of view it is better to proper report this situation, not
just crash.
As far as i can see usually php report this situation in error log.
I'v tried 5.1.4 and 5.1.2 with same results.






-- 
Edit this bug report at http://bugs.php.net/?id=37428&edit=1


#37428 [Opn]: php.exe crashing if unable to load any of configured extension dll

2006-05-22 Thread velkran-2 at yahoo dot com
 ID:   37428
 User updated by:  velkran-2 at yahoo dot com
 Reported By:  velkran-2 at yahoo dot com
 Status:   Open
 Bug Type: *General Issues
 Operating System: Windows XP SP2
 PHP Version:  5.1.4
 New Comment:

I was able to reproduce this problem on latest 5.2 snapshot


Previous Comments:


[2006-05-16 19:07:31] velkran-2 at yahoo dot com

Just to be sure, i did these steps:
1. Download php5.2-win32-200605161430.zip
2. Download php5.2-dbgpack-win32-latest.zip
3. unpack these 2 files to e:\php5.2
4. copy php.ini-recommended to php.ini
5. edit php.ini, uncomment line ;error_log = syslog
6. edit php.ini (to emulate "PHP Startup: Unable to load dynamic
library" error)
Before:
;extension=php_bz2.dll
To:
extension=xphp_bz2.dll
7. change current directory to e:\php5.2
8. start php.exe
9. got usual windows GPF message, click "Debug" to create backtrace
Please find a Backtrace at the end of this comment.

As far as i can see there is some problem with windows event log
reporting, basically it failes at this line:
/* default event source */
--->if (!PW32G(log_source))
openlog("php", LOG_PID, LOG_SYSLOG);
I'm pretty that openlog was not called yet, i put a breakpoint on it.
So failing somewhere inside mystical PW32G thing.
Hope this will be help.

A Backtrace (hope you will see it well-formatted):
>   php5ts.dll!syslog(int priority=6, const char * 
message=0x102a6814,
...)  Line 91   C
php5ts.dll!php_log_err(char * log_message=0x009b1080, void * * *
tsrm_ls=0x00324200)  Line 349 + 0x14C
php5ts.dll!php_error_cb(int type=32, const char *
error_filename=0x102967d0, const unsigned int error_lineno=0, const
char * format=0x009b1080, char * args=0x0001)  Line 763 C
php5ts.dll!zend_error(int type=32, const char * format=0x10296780,
...)  Line 948 + 0x17   C
php5ts.dll!php_verror(const char * docref=0x, const char *
params=0x10296690, int type=32, const char * format=0x000b, char *
args=0x006d, void * * * tsrm_ls=0x)  Line 573   C
php5ts.dll!php_error_docref0(const char * docref=0x, void * *
* tsrm_ls=0x00324200, int type=32, const char * format=0x10307754, ...) 
Line 588 + 0x23 C
php5ts.dll!php_dl(_zval_struct * file=0x009f5610, int type=1,
_zval_struct * return_value=0x0012fbe4, int start_now=0, void * * *
tsrm_ls=0x00324200)  Line 142 + 0x26C
php5ts.dll!php_load_function_extension_cb(void * arg=0x009f5610, void
* * * tsrm_ls=0x00324200)  Line 236 C
php5ts.dll!zend_llist_apply(_zend_llist * l=0x104366d4, void (void *,
void * * *)* func=0x100bcb50, void * * * tsrm_ls=0x00324200)  Line 191 +
0x7 C
php5ts.dll!php_ini_register_extensions(void * * * tsrm_ls=0x00324200)
 Line 555   C
php5ts.dll!php_module_startup(_sapi_module_struct * sf=0x00405020,
_zend_module_entry * additional_modules=0x, unsigned int
num_additional_modules=0)  Line 1563C
php.exe!main(int argc=64, char * * argv=0x7ffde000)  Line 681 +
0x12C
ntdll.dll!7c915b4f()
ntdll.dll!7c9131dc()
ntdll.dll!7c913212()
ntdll.dll!7c913281()
ntdll.dll!7c913288()
ntdll.dll!7c913288()
ntdll.dll!7c9106eb()
msvcrt.dll!77c2c3c9()   
msvcrt.dll!77c2c3ce()   
ntdll.dll!7c915b4f()
msvcrt.dll!77c3ac5f()   
php.exe!_mainCRTStartup()  + 0xe3   
ntdll.dll!7c915b4f()
kernel32.dll!7c816d4f() 
ntdll.dll!7c915b4f()
kernel32.dll!7c8399f3()



[2006-05-14 12:31:05] [EMAIL PROTECTED]

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to "Open".

Thank you for your interest in PHP.






[2006-05-13 10:43:27] velkran-2 at yahoo dot com

Description:

php.exe will crash if any of configured extension dll cannot be found.
It can either incorrect extension_dir or just missing dll file.
>From my point of view it is better to proper report this situation, not
just crash.
As far as i can see usually php report this situation in error log.
I'v tried 5.1.4 and 5.1.2 with same results.






-- 
Edit this bug report at http://bugs.php.net/?id=37428&edit=1


#37496 [Asn->Fbk]: FastCGI output buffer overrun

2006-05-22 Thread dmitry
 ID:   37496
 Updated by:   [EMAIL PROTECTED]
 Reported By:  gacek at intertele dot pl
-Status:   Assigned
+Status:   Feedback
 Bug Type: CGI related
 Operating System: Linux
 PHP Version:  5CVS-2006-05-18 (snap)
 Assigned To:  dmitry
 New Comment:

The patch is partially commited into HEAD, PHP_5_2 and PHP_5_1. Did bug
go away?


Previous Comments:


[2006-05-22 07:03:47] gacek at intertele dot pl

Actually, these are two bugs:
1. Interrupted flush_cgi() does not reset request->out_pos.
Thus we must check flush_cgi return code and stop filling buffer if
flush_cgi fails.
2. In fcgi_request structure there is additional "reserve" allocated
after out_buf. It's of sizeof(fcgi_header)+sizeof(_fcgi_end_reuest)
afair.
But at certain fcgi_write str lengths, there were three consecutive
operations on buffer:

close_packet() - ads 8-byte padding
open_packet()  - ads header
fcgi_flush()   - calls close_packet(), which ads 8-byte padding again

Last call might overrun buffer+reserve up to 7 bytes, smashing env
table pointer.
Changing first close_packet to fcgi_flush() eliminates this risk.

Patch against 5.1.4 below:

diff -ru php-5.1.4/sapi/cgi/fastcgi.c
php-5.1.4-patched/sapi/cgi/fastcgi.c
--- php-5.1.4/sapi/cgi/fastcgi.c2006-05-03 17:39:16.0
+0200
+++ php-5.1.4-patched/sapi/cgi/fastcgi.c2006-05-22
08:40:56.0 +0200
@@ -813,7 +813,10 @@
}
memcpy(req->out_pos, str, limit);
req->out_pos += limit;
-   fcgi_flush(req, 0);
+   if (!fcgi_flush(req, 0)) {
+   req->keep = 0;
+   return -1;
+   }
open_packet(req, type);
memcpy(req->out_pos, str + limit, len - limit);
req->out_pos += len - limit;
@@ -821,12 +824,19 @@
int pos = 0;
int pad;
 
-   close_packet(req);
+   if (!fcgi_flush(req, 0)) {
+   req->keep = 0;
+   return -1;
+   }
+
while ((len - pos) > 0x) {
open_packet(req, type);
fcgi_make_header(req->out_hdr, type, req->id,
0xfff8);
req->out_hdr = NULL;
-   fcgi_flush(req, 0);
+   if (!fcgi_flush(req, 0)) {
+   req->keep = 0;
+   return -1;
+   }
if (safe_write(req, str + pos, 0xfff8) !=
0xfff8) {
req->keep = 0;
return -1;
@@ -840,7 +850,10 @@
open_packet(req, type);
fcgi_make_header(req->out_hdr, type, req->id, (len -
pos) - rest);
req->out_hdr = NULL;
-   fcgi_flush(req, 0);
+   if (!fcgi_flush(req, 0)) {
+   req->keep = 0;
+   return -1;
+   }
if (safe_write(req, str + pos, (len - pos) - rest) !=
(len - pos) - rest) {
req->keep = 0;
return -1;



[2006-05-18 13:01:29] gacek at intertele dot pl

Description:

FastCGI buffer output (request->out_buf) is overwritten.

Reproduce code:
---
Not easily reproducible, but happens several times per hour on our
servers. Have multiple corefiles, all generated by this bug. 

Actual result:
--
Core analysis (5.2 snapshot downloaded today):

(gdb) bt
#0  zend_hash_destroy (ht=0x7fd50f88) at
/usr/src/debug/php-5.1.4/Zend/zend_hash.c:519
#1  0x005e95c2 in fcgi_finish_request (req=0x7fd4ef50) at
/usr/src/debug/php-5.1.4/sapi/cgi/fastcgi.c:600
#2  0x005e9d1e in fcgi_accept_request (req=0x7fd4ef50) at
/usr/src/debug/php-5.1.4/sapi/cgi/fastcgi.c:630
#3  0x005ebaf3 in main (argc=3, argv=0x7fd51348) at
/usr/src/debug/php-5.1.4/sapi/cgi/cgi_main.c:1334
(gdb) up 3
#3  0x005ebaf3 in main (argc=3, argv=0x7fd51348) at
/usr/src/debug/php-5.1.4/sapi/cgi/cgi_main.c:1334
1334while (!fastcgi ||
fcgi_accept_request(&request) >= 0) {

(gdb) p request
$5 = {listen_socket = 0, fd = 6, id = 1, keep = 0, in_len = 0, in_pad =
0, out_hdr = 0x0, out_pos = 0x7fd51bb0 "\001\003", 
  out_buf =
"\001\006\000\001\037ř\000\000Őîr\227\215śMĂć^\204W?uqóőÉ=\001ţu*Mť\024É<Ŕps\201OfR\234ă?Î\215ÉZîQ\221\035\225\212ő5\"Üż\236rŕ\214c§J$\223EĂBú\\
\206<\220NxŚÍf\216ŚDČ
W\făgcŽ2M\025â\213ä\031\\qŢ\230,q\206Î\030\036qN6dĘ--\n7Č\020\036ĹExç\211'\027\210\024üŰ\233\030­âľ3\223vł9KM\034K*Í°yŠĘâ˝?HŐ×ÉRĂý\222=ë´óÚľŮŃÁŠ\"ˇ@\203=Şú]ĽÍČXÇSVôÔ\205Ž\207¨é\221."...,

  reserved = "\001\006\000\001\f&\002\000\220E&ě?#Ľ\027", env
= {nTableSize = 322132388

#31323 [Com]: session file permissions differ randomly

2006-05-22 Thread pieter at q-go dot com
 ID:   31323
 Comment by:   pieter at q-go dot com
 Reported By:  julien dot mathieu at gmail dot com
 Status:   No Feedback
 Bug Type: Session related
 Operating System: Linux
 PHP Version:  5.1.2, 4.3.9
 New Comment:

We have similar problems on Debian with PHP 5.1.2 and 5.1.4.

Sessions are all created with correct permissions, but we get the same
permission denied error in 5% of the cases.

drwx-wx-wt   2 root root 4096 May 22 11:03 .
drwxr-xr-x  27 root root 4096 May 18 13:44 ..
-rw---   1 www-data www-data0 May 22 11:03
sess_11f06ca5b4701f4be8be30b275e4e51e
-rw---   1 www-data www-data 1569 May 22 11:00
sess_1856e3c4630f074a1b0490c4792c3e53
-rw---   1 www-data www-data0 May 22 10:21
sess_d110fb48e440d1ec4ac610243e897c69
-rw---   1 www-data www-data 1717 May 22 11:05
sess_f9668179e8a92714f4d9553504bdcd93

Changing the default Debian permissions on /var/lib/php5 from
drwx-wx-wt to drwxrwxrwt seems to help.

I am putting this here because if the two cases are related, the
problem might be more general.


Previous Comments:


[2006-03-28 13:15:10] [EMAIL PROTECTED]

No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.





[2006-03-21 19:02:31] jd at godaddy dot com

I should note that after we cleaned all of the sess_* files in /tmp,
the problem seems to have gone away (at least for the moment).  Why are
future PHP session file permissions being corrupted by preexisting
session files?  Is there possibly a buffer overflow possible in the
session files, where perhaps a corrupted session file can clobber these
pages?



[2006-03-21 17:35:39] jd at godaddy dot com

We're seeing this with PHP 4.4.1 and Zend Platform v2.1.0 when using
phpMyAdmin.

Check out these permissions

-rwxr-xr-x1 nobody   nobody  15187 Mar 16 12:06
sess_0834d5863159f74b560ee4c64fab1eb5
-rwxrwxrwx1 nobody   nobody  0 Mar 21 09:29
sess_243458755660a3b6be9cd416c67bb7e7
-rwxrwxrwx1 nobody   nobody  15186 Mar 15 12:20
sess_435fad9a208051008e0efa69bd1d6fc7
-rwxrwxrwx1 root root0 Mar 21 09:25
sess_47957086e32d77933e6fd8a1dc63e1f7
-rwx--x--T1 nobody   nobody  15187 Mar 15 12:54
sess_7b9a5a1840f81a13e86c0ae8ced7ff7a
-rwx--x--T1 nobody   nobody  15187 Mar 15 12:44
sess_9bedbfafd824c4a3495e7e36070daaca
-rwxr-xr-x1 nobody   nobody  15191 Mar 13 16:55
sess_b01db0867b79aa251c20356e519cac8b
-rwx--x--T1 nobody   nobody  15187 Mar 15 15:06
sess_ec5699d9df2be07f8c06c4676230c3de
-rwx--x--T1 nobody   nobody  15191 Mar 15 11:47
sess_fb0e71df00e24b1b6d22b771fb4c7281



[2006-02-07 11:15:11] julien dot mathieu at gmail dot com

I work now with the 5.1.2 version. The problem still occurs.



[2004-12-29 18:28:06] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip





The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/31323

-- 
Edit this bug report at http://bugs.php.net/?id=31323&edit=1


#37496 [Asn]: FastCGI output buffer overrun

2006-05-22 Thread gacek at intertele dot pl
 ID:   37496
 User updated by:  gacek at intertele dot pl
 Reported By:  gacek at intertele dot pl
 Status:   Assigned
 Bug Type: CGI related
 Operating System: Linux
 PHP Version:  5CVS-2006-05-18 (snap)
 Assigned To:  dmitry
 New Comment:

Actually, these are two bugs:
1. Interrupted flush_cgi() does not reset request->out_pos.
Thus we must check flush_cgi return code and stop filling buffer if
flush_cgi fails.
2. In fcgi_request structure there is additional "reserve" allocated
after out_buf. It's of sizeof(fcgi_header)+sizeof(_fcgi_end_reuest)
afair.
But at certain fcgi_write str lengths, there were three consecutive
operations on buffer:

close_packet() - ads 8-byte padding
open_packet()  - ads header
fcgi_flush()   - calls close_packet(), which ads 8-byte padding again

Last call might overrun buffer+reserve up to 7 bytes, smashing env
table pointer.
Changing first close_packet to fcgi_flush() eliminates this risk.

Patch against 5.1.4 below:

diff -ru php-5.1.4/sapi/cgi/fastcgi.c
php-5.1.4-patched/sapi/cgi/fastcgi.c
--- php-5.1.4/sapi/cgi/fastcgi.c2006-05-03 17:39:16.0
+0200
+++ php-5.1.4-patched/sapi/cgi/fastcgi.c2006-05-22
08:40:56.0 +0200
@@ -813,7 +813,10 @@
}
memcpy(req->out_pos, str, limit);
req->out_pos += limit;
-   fcgi_flush(req, 0);
+   if (!fcgi_flush(req, 0)) {
+   req->keep = 0;
+   return -1;
+   }
open_packet(req, type);
memcpy(req->out_pos, str + limit, len - limit);
req->out_pos += len - limit;
@@ -821,12 +824,19 @@
int pos = 0;
int pad;
 
-   close_packet(req);
+   if (!fcgi_flush(req, 0)) {
+   req->keep = 0;
+   return -1;
+   }
+
while ((len - pos) > 0x) {
open_packet(req, type);
fcgi_make_header(req->out_hdr, type, req->id,
0xfff8);
req->out_hdr = NULL;
-   fcgi_flush(req, 0);
+   if (!fcgi_flush(req, 0)) {
+   req->keep = 0;
+   return -1;
+   }
if (safe_write(req, str + pos, 0xfff8) !=
0xfff8) {
req->keep = 0;
return -1;
@@ -840,7 +850,10 @@
open_packet(req, type);
fcgi_make_header(req->out_hdr, type, req->id, (len -
pos) - rest);
req->out_hdr = NULL;
-   fcgi_flush(req, 0);
+   if (!fcgi_flush(req, 0)) {
+   req->keep = 0;
+   return -1;
+   }
if (safe_write(req, str + pos, (len - pos) - rest) !=
(len - pos) - rest) {
req->keep = 0;
return -1;


Previous Comments:


[2006-05-18 13:01:29] gacek at intertele dot pl

Description:

FastCGI buffer output (request->out_buf) is overwritten.

Reproduce code:
---
Not easily reproducible, but happens several times per hour on our
servers. Have multiple corefiles, all generated by this bug. 

Actual result:
--
Core analysis (5.2 snapshot downloaded today):

(gdb) bt
#0  zend_hash_destroy (ht=0x7fd50f88) at
/usr/src/debug/php-5.1.4/Zend/zend_hash.c:519
#1  0x005e95c2 in fcgi_finish_request (req=0x7fd4ef50) at
/usr/src/debug/php-5.1.4/sapi/cgi/fastcgi.c:600
#2  0x005e9d1e in fcgi_accept_request (req=0x7fd4ef50) at
/usr/src/debug/php-5.1.4/sapi/cgi/fastcgi.c:630
#3  0x005ebaf3 in main (argc=3, argv=0x7fd51348) at
/usr/src/debug/php-5.1.4/sapi/cgi/cgi_main.c:1334
(gdb) up 3
#3  0x005ebaf3 in main (argc=3, argv=0x7fd51348) at
/usr/src/debug/php-5.1.4/sapi/cgi/cgi_main.c:1334
1334while (!fastcgi ||
fcgi_accept_request(&request) >= 0) {

(gdb) p request
$5 = {listen_socket = 0, fd = 6, id = 1, keep = 0, in_len = 0, in_pad =
0, out_hdr = 0x0, out_pos = 0x7fd51bb0 "\001\003", 
  out_buf =
"\001\006\000\001\037ř\000\000Őîr\227\215śMĂć^\204W?uqóőÉ=\001ţu*Mť\024É<Ŕps\201OfR\234ă?Î\215ÉZîQ\221\035\225\212ő5\"Üż\236rŕ\214c§J$\223EĂBú\\
\206<\220NxŚÍf\216ŚDČ
W\făgcŽ2M\025â\213ä\031\\qŢ\230,q\206Î\030\036qN6dĘ--\n7Č\020\036ĹExç\211'\027\210\024üŰ\233\030­âľ3\223vł9KM\034K*Í°yŠĘâ˝?HŐ×ÉRĂý\222=ë´óÚľŮŃÁŠ\"ˇ@\203=Şú]ĽÍČXÇSVôÔ\205Ž\207¨é\221."...,

  reserved = "\001\006\000\001\f&\002\000\220E&ě?#Ľ\027", env
= {nTableSize = 3221323880, nTableMask = 1456291101, 
nNumOfElements = 965277051, nNextFreeElement = 4251007554600414553,
pInternalPointer = 0xe4ef03c50554f8b, 
pListHead = 0xaa3ab31e557c6d29, pListTail = 0x42a9064f1b27134e,
arBuckets = 0xdd2