#45151 [Asn->Csd]: Crash with URI/file..php (filename contains 2 dots)

ID: 45151 Updated by: dmitry@php.net Reported By: giedrius at su dot lt -Status: Assigned +Status: Closed Bug Type: CGI related Operating System: Linux 2.6 PHP Version: 5.2.6 Assigned To: dmitry New Comment: This bug has been fixed in CVS. Snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. Thank you for the report, and for helping us make PHP better. Previous Comments: ------------------------------------------------------------------------ [2008-07-11 16:27:40] jani@php.net Dmitry, can you check this out please? ------------------------------------------------------------------------ [2008-06-02 19:22:10] giedrius at su dot lt Fixed by replacing ".." to "../" in sapi/cgi/cgi_main.c for directory protection in url ------------------------------------------------------------------------ [2008-06-02 19:20:35] giedrius at su dot lt Description: ------------ PHP SEGfaults when opening file..php PHP(FastCGI SAPI) is invoked via suphp running php-cgi binary manually does NOT trigger segfault For the moment managed to fix this by replacing ".." directory protection to "../" Expected result: ---------------- parse the file Actual result: -------------- segfaults ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=45151&edit=1