#49851 [Opn]: HTTP breaks on long header line

From:	Sjoerd@php.net	Date:	Mon, 12 Oct 2009 20:24:53 +0000
Subject:	#49851 [Opn]: HTTP breaks on long header line
References:	1	Groups:	php.bugs
Request:	Send a blank email to php-bugs+get-143500@lists.php.net to get a copy of this message

 ID:               49851
 Updated by:       Sjoerd@php.net
 Reported By:      sjoerd-php at linuxonly dot nl
 Status:           Open
 Bug Type:         HTTP related
 Operating System: Linux 2.6.28 Ubuntu 9.0.4
 PHP Version:      5.3SVN-2009-10-12 (SVN)
 New Comment:

See also bug #49847 "exec() confused by a specially crafted string",
which has a similar cause.

From http_fopen_wrapper.c:
while (!body && !php_stream_eof(stream)) {
	size_t http_header_line_length;
	if (php_stream_get_line(stream, http_header_line,
HTTP_HEADER_BLOCK_SIZE, &http_header_line_length) && *http_header_line
!= '\n' && *http_header_line != '\r') {
		...
	} else {
		break;


Previous Comments:
------------------------------------------------------------------------

[2009-10-12 20:20:08] sjoerd-php at linuxonly dot nl

Description:
------------
If a HTTP response contains an header of exactly 1024 characters, the
remaining headers are not parsed and are returned in the output.

Reproduce code:
---------------
<?php
echo file_get_contents('http://localhost/a.php');
?>

a.php:
<?php
header(str_pad('X-Padding: ', 1022, 'x'));
header('Location: http://www.google.nl/');
echo "Foo";
?>

Expected result:
----------------
The homepage of google.nl.

Actual result:
--------------
Location: http://www.google.nl
Vary: Accept-Encoding
Content-Length: 3
Connection: close
Content-Type: text/html

Foo


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=49851&edit=1



   

Thread (12 messages)

• sjoerd-php at linuxonly dot nlMon, 12 Oct 2009 20:20:09 +0000
  • Sjoerd@php.netMon, 12 Oct 2009 20:24:53 +0000#49851 [Opn]: HTTP breaks on long header line
  • lbarnaud@php.netMon, 12 Oct 2009 21:16:11 +0000#49851 [Opn->Ver]: HTTP breaks on long header line
  • srinatar@php.netSat, 24 Oct 2009 02:16:58 +0000#49851 [Ver->Fbk]: HTTP breaks on long header line
  • sjoerd@php.netSat, 24 Oct 2009 08:08:11 +0000#49851 [Fbk->Opn]: HTTP breaks on long header line
  • jani@php.netMon, 30 Nov 2009 19:48:28 +0000#49851 [Opn->Fbk]: HTTP breaks on long header line
  • sjoerd@php.netWed, 02 Dec 2009 16:53:12 +0000#49851 [Fbk->Opn]: HTTP breaks on long header line
  • jani@php.netWed, 02 Dec 2009 18:46:39 +0000#49851 [Opn]: http wrapper breaks on 1024 char long headers
  • iliaa@php.netThu, 10 Dec 2009 03:23:14 +0000#49851 [Opn->Csd]: http wrapper breaks on 1024 char long headers
  • sjoerd@php.netFri, 11 Dec 2009 13:17:11 +0000#49851 [Csd]: http wrapper breaks on 1024 char long headers
  • jani@php.netMon, 14 Dec 2009 06:19:14 +0000#49851 [Csd->Asn]: http wrapper breaks on 1024 char long headers
  • jani@php.netMon, 21 Dec 2009 10:10:38 +0000#49851 [Asn->Csd]: http wrapper breaks on 1024 char long headers