#18726 [Opn]: Empty Argument List Causes PHP to Hang

ID: 18726 Updated by: eru@php.net Reported By: mattmurphy@kc.rr.com Status: Open Bug Type: Performance problem Operating System: Win32 PHP Version: 4.2.2 New Comment: No, this is not a bug, as you wouldn't put php.exe in the cgi-bin directory in the first place. Secondly, when called without arguments, php doesn't "hang", but waits for input from the stdin. Previous Comments: ------------------------------------------------------------------------ [2002-08-03 16:09:16] mattmurphy@kc.rr.com So, the PHP team is telling me now that something that causes a product to hang, and can be exploited remotely isn't even a *bug*? ------------------------------------------------------------------------ [2002-08-03 15:17:06] sander@php.net Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php ------------------------------------------------------------------------ [2002-08-03 15:04:32] mattmurphy@kc.rr.com Affected: PHP 4.2.0/4.2.2 for Win32 confirmed Problem: An issue in PHP's CGI EXE (possibly other modules, but the EXE is known to be susceptible) can cause it to hang if it is given a command line like this: C:\PHP>php [No Output - PHP hangs] ^C C:\PHP> cgi.force_redirect being enabled has *no effect* on the result of this command -- PHP hangs regardless. With the rare config of a CGI/SAPI on Apache, a certain type of request could be used to do this remotely: http://apache-site/php/php.exe If this is done repeatedly, it could starve server resources. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=18726&edit=1