#18726 [Bgs]: Empty Argument List Causes PHP to Hang

ID: 18726 Updated by: edink@php.net Reported By: mattmurphy@kc.rr.com Status: Bogus Bug Type: Performance problem Operating System: Win32 PHP Version: 4.2.2 New Comment: PHP will by default read its scripts from STDIN and does not hang. Try typing in something and press Ctrl-Z and you will see PHP executing the "script". Anyway, this is not a correct place for user questions. Please visit http://www.php.net/support for more information. Previous Comments: ------------------------------------------------------------------------ [2002-08-03 16:17:24] eru@php.net Forgot to set the status. ------------------------------------------------------------------------ [2002-08-03 16:17:03] eru@php.net No, this is not a bug, as you wouldn't put php.exe in the cgi-bin directory in the first place. Secondly, when called without arguments, php doesn't "hang", but waits for input from the stdin. ------------------------------------------------------------------------ [2002-08-03 16:09:16] mattmurphy@kc.rr.com So, the PHP team is telling me now that something that causes a product to hang, and can be exploited remotely isn't even a *bug*? ------------------------------------------------------------------------ [2002-08-03 15:17:06] sander@php.net Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php ------------------------------------------------------------------------ [2002-08-03 15:04:32] mattmurphy@kc.rr.com Affected: PHP 4.2.0/4.2.2 for Win32 confirmed Problem: An issue in PHP's CGI EXE (possibly other modules, but the EXE is known to be susceptible) can cause it to hang if it is given a command line like this: C:\PHP>php [No Output - PHP hangs] ^C C:\PHP> cgi.force_redirect being enabled has *no effect* on the result of this command -- PHP hangs regardless. With the rare config of a CGI/SAPI on Apache, a certain type of request could be used to do this remotely: http://apache-site/php/php.exe If this is done repeatedly, it could starve server resources. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=18726&edit=1