#45151 [Opn->Asn]: Crash with URI/file..php (filename contains 2 dots)
| From: | jani@php.net | Date: | Fri, 11 Jul 2008 16:27:40 +0000 |
| Subject: | #45151 [Opn->Asn]: Crash with URI/file..php (filename contains 2 dots) | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-126503@lists.php.net to get a copy of this message | ||
ID: 45151
Updated by: jani@php.net
Reported By: giedrius at su dot lt
-Status: Open
+Status: Assigned
Bug Type: CGI related
Operating System: Linux 2.6
PHP Version: 5.2.6
-Assigned To:
+Assigned To: dmitry
New Comment:
Dmitry, can you check this out please?
Previous Comments:
------------------------------------------------------------------------
[2008-06-02 19:22:10] giedrius at su dot lt
Fixed by replacing ".." to "../" in sapi/cgi/cgi_main.c
for directory protection in url
------------------------------------------------------------------------
[2008-06-02 19:20:35] giedrius at su dot lt
Description:
------------
PHP SEGfaults when opening file..php
PHP(FastCGI SAPI) is invoked via suphp
running php-cgi binary manually does NOT trigger segfault
For the moment managed to fix this by replacing ".." directory
protection to "../"
Expected result:
----------------
parse the file
Actual result:
--------------
segfaults
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=45151&edit=1