Bug #55121 [ReO->Fbk]: Segfault with multipart/form-data POST / 404 request

From: Date: Fri, 09 Dec 2011 05:40:44 +0000
Subject: Bug #55121 [ReO->Fbk]: Segfault with multipart/form-data POST / 404 request
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-165762@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=55121&edit=1

 ID:                 55121
 Updated by:         laruence@php.net
 Reported by:        nbpoole@php.net
 Summary:            Segfault with multipart/form-data POST / 404 request
-Status:             Re-Opened
+Status:             Feedback
 Type:               Bug
 Package:            Built-in web server
 Operating System:   Ubuntu 10.04.2 LTS (64-bit)
 PHP Version:        5.4SVN-2011-07-03 (snap)
 Assigned To:        laruence
 Block user comment: N
 Private report:     N

 New Comment:

Please try using this snapshot:

  http://snaps.php.net/php5.4-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/




Previous Comments:
------------------------------------------------------------------------
[2011-12-09 03:50:41] reeze dot xia at gmail dot com

haha, got you idea, I will open a new one.
This bug's is indeed differ from the one I updated:-)

------------------------------------------------------------------------
[2011-12-09 03:31:19] laruence@php.net

ah, sorry, my mis-take, assumed the wrong one :)

------------------------------------------------------------------------
[2011-12-09 03:29:47] laruence@php.net

Hi, this is a closed bug, and your problem is another issue, could you please open 
a new bug instead of reopening a closed one? 

thanks

------------------------------------------------------------------------
[2011-12-09 03:07:29] reeze dot xia at gmail dot com

To make it clear, the way to reproduce the core dump is:

$ curl --form a=b  "http://localhost:8000/file.php"
$ curl --form a=b  "http://localhost:8000/file-non-exist.php"

if the --enable-debug flag is enabled, cli-server will exit with a message "in 
consist hashtable", normally it simply core dumped.

------------------------------------------------------------------------
[2011-12-09 02:50:26] reeze dot xia at gmail dot com

Hi, the 5.4RC3 and the trunk still have this bug. 
After trace the core.
I found the SG(rfc1867_uploaded_files) did't set to NULL after sapi deactive.
when try to free the HashTable php core dumped on the next form-data post request.
So It's a one-fix.
I have attached a patch for this, patch tested on Mac OS X 10.6.7 & Redhat Linux.

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=55121


-- 
Edit this bug report at https://bugs.php.net/bug.php?id=55121&edit=1


Thread (17 messages)

« previous php.bugs (#165762) next »