#35843 [NEW]: imagettftext don't check open_basedir and safe_mode
From: vmlinuz386 at yahoo dot com dot ar Operating system: GNU/Linux PHP version: 4.4.1 PHP Bug Type: GD related Bug description: imagettftext don't check open_basedir and safe_mode Description: In file ext/gd/gdttf.c this call to freetype without any check open_basedir and safe_mode: if ((err = TT_Open_Face(*b-engine, a-fontname, a-face))) { this is also in 5.1.1 If you need a font in your scripts the font will be in some directory asigned for you. -- Edit bug report at http://bugs.php.net/?id=35843edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=35843r=trysnapshot44 Try a CVS snapshot (PHP 5.1): http://bugs.php.net/fix.php?id=35843r=trysnapshot51 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=35843r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=35843r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=35843r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=35843r=needtrace Need Reproduce Script:http://bugs.php.net/fix.php?id=35843r=needscript Try newer version:http://bugs.php.net/fix.php?id=35843r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=35843r=support Expected behavior:http://bugs.php.net/fix.php?id=35843r=notwrong Not enough info: http://bugs.php.net/fix.php?id=35843r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=35843r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=35843r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=35843r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=35843r=dst IIS Stability:http://bugs.php.net/fix.php?id=35843r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=35843r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=35843r=float No Zend Extensions: http://bugs.php.net/fix.php?id=35843r=nozend MySQL Configuration Error:http://bugs.php.net/fix.php?id=35843r=mysqlcfg
#35040 [Com]: slowness and timeouts when using php-4.4.1
ID: 35040 Comment by: vmlinuz386 at yahoo dot com dot ar Reported By: sbailey at mileone dot com Status: Feedback Bug Type: Performance problem Operating System: FreeBSD 5.3 PHP Version: 4.4.1RC1 New Comment: I have the same problem, but running on apache-1.3.34 (Linux), with the php-4.4.1, i am back to php-4.4.0 and this fixes. Here is the phpinfo() http://www.vmlinuz.com.ar/phpinfo.php Squirrelmail is 1.4.5, can browse all pages, but the problem appear when open a message. Another problem is that httpd takes many more seconds to stop with 4.4.1, not with 4.4.0. Previous Comments: [2005-10-31 21:13:21] [EMAIL PROTECTED] Not enough information was provided for us to be able to handle this bug. Please re-read the instructions at http://bugs.php.net/how-to-report.php If you can provide more information, feel free to add it to this bug and change the status back to Open. Thank you for your interest in PHP. [2005-10-31 20:53:39] sbailey at mileone dot com Description: Installed a fresh install of php-4.4.1 and the only compile options were --with-apxs2 and I am running apache 2.0.55 on FreeBSD 5.3 and when I run SquirrelMail version 1.4.5 httpd takes alot of system resources and is really slow. I can provide more info if nessary. Thanks -- Edit this bug report at http://bugs.php.net/?id=35040edit=1