#39711 [NEW]: shell_exec() fails in HTTPS mode when safe_mode = off (local)

From: joe at neosource dot com dot au Operating system: Linux / Apache/2.0.52 PHP version: 4.4.4 PHP Bug Type: Safe Mode/open_basedir Bug description: shell_exec() fails in HTTPS mode when safe_mode = off (local) Description: ------------ Hi, I have found that on PHP 4.4.4 shell_exec() fails when local safe_mode = off and master safe_mode = on - only when the script is a secure HTTPS URL. The problem does not appear in HTTP mode. shell_exec() and other related & safe_mode affected functions fail too such as is_executable() and file_exists(), but no error or warning message is generated. This bug caused me some grief over the past couple days as I had no idea why my sendmail script was behaving strangely as sometimes it'd work and other times it wouldn't (due to the site switching from HTTP/HTTPS mode). It wasn't an obvious bug to find, but after much debugging this is what I've found to be the cause. I hope you guys have as much fun squishing this bug as I did finding it ! :) Happy to offer any assistance with reproducing / troubleshooting the bug. Joe -- Edit bug report at http://bugs.php.net/?id=39711&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=39711&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=39711&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=39711&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=39711&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=39711&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=39711&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=39711&r=needscript Try newer version: http://bugs.php.net/fix.php?id=39711&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=39711&r=support Expected behavior: http://bugs.php.net/fix.php?id=39711&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=39711&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=39711&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=39711&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=39711&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=39711&r=dst IIS Stability: http://bugs.php.net/fix.php?id=39711&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=39711&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=39711&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=39711&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=39711&r=mysqlcfg