ID: 49868
User updated by: majkl578 at gmail dot com
Reported By: majkl578 at gmail dot com
Status: Verified
Bug Type: Scripting Engine problem
Operating System: *
PHP Version: 5.3, 6 (2009-10-19)
New Comment:
still present in 5.3.1RC3
Previous Comments:
------------------------------------------------------------------------
[2009-10-19 11:36:44] majkl578 at gmail dot com
This security issue persists in php5.3-200910191030 snapshot.
------------------------------------------------------------------------
[2009-10-14 11:31:40] majkl578 at gmail dot com
This problem does not appear neither on PHP 5.2.6 (windows binary) nor
5.2.10 (gentoo pkg).
------------------------------------------------------------------------
[2009-10-13 18:02:05] Sjoerd@php.net
See also bug #37306 max_execution_time = max_input_time
------------------------------------------------------------------------
[2009-10-13 17:41:55] majkl578 at gmail dot com
Description:
------------
PHP ignores the max_execution_time set in php.ini and sets (somehow
internally) it to the value of max_input_time. ini_get returns correct
values of both of these settings, but the script is halted after the
time set as max_input_time.
This bug affects PHP5.3RC1 and also the latest snapshot of PHP5.3.
It is probably similar to an old bug #37306.
Related php.ini values:
max_execution_time = 5
max_input_time = 10
Configure command:
./configure --prefix=/usr --sysconfdir=/etc --cache-file=./config.cache
--with-config-file-path=/etc/php
--with-config-file-scan-dir=/etc/php/extensions
--with-apxs2=/usr/bin/apxs2 --with-mysql --with-mysqli --with-curl
--with-sqlite --enable-sqlite-utf8 --with-gd --enable-mbstring
--with-openssl --disable-short-tags --with-mcrypt --with-bz2 --with-zlib
--enable-zip --with-xmlrpc --enable-soap --without-mssql --with-pgsql
--with-tidy --enable-debug --disable-posix --enable-exif --enable-ftp
--with-gettext --with-mhash --enable-pcntl --with-pspell
--enable-sockets --with-xsl --enable-cli --enable-calendar --disable-cgi
--enable-zend-multibyte
Reproduce code:
---------------
<?php
echo ini_get('max_execution_time'), ' | ', ini_get('max_input_time');
while(true);
Expected result:
----------------
5 | 10
Fatal error: Maximum execution time of 5 seconds exceeded in
/foo/bar.php on line 4
Actual result:
--------------
5 | 10
Fatal error: Maximum execution time of 10 seconds exceeded in
/foo/bar.php on line 4
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=49868&edit=1