#45151 [Opn]: PHP SEGfaults when URI/file..php (2dots)
| From: | giedrius at su dot lt | Date: | Mon, 02 Jun 2008 19:22:11 +0000 |
| Subject: | #45151 [Opn]: PHP SEGfaults when URI/file..php (2dots) | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-125435@lists.php.net to get a copy of this message | ||
ID: 45151
User updated by: giedrius at su dot lt
Reported By: giedrius at su dot lt
Status: Open
Bug Type: CGI related
Operating System: Linux 2.6
PHP Version: 5.2.6
New Comment:
Fixed by replacing ".." to "../" in sapi/cgi/cgi_main.c
for directory protection in url
Previous Comments:
------------------------------------------------------------------------
[2008-06-02 19:20:35] giedrius at su dot lt
Description:
------------
PHP SEGfaults when opening file..php
PHP(FastCGI SAPI) is invoked via suphp
running php-cgi binary manually does NOT trigger segfault
For the moment managed to fix this by replacing ".." directory
protection to "../"
Expected result:
----------------
parse the file
Actual result:
--------------
segfaults
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=45151&edit=1