#19197 [Opn->Fbk]: Serious bug with ImageCreateTrueColor and/or ? file upload
| From: | cynic@php.net | Date: | Fri, 30 Aug 2002 15:11:27 +0000 |
| Subject: | #19197 [Opn->Fbk]: Serious bug with ImageCreateTrueColor and/or ? file upload | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-18260@lists.php.net to get a copy of this message | ||
ID: 19197
Updated by: cynic@php.net
Reported By: bugsphp@yayel.com
-Status: Open
+Status: Feedback
Bug Type: GD related
Operating System: Linux Redhat 7.2
PHP Version: 4.2.2
New Comment:
imo it's quite obvious which parts of the script are irrelevant:
input checking, database stuff, jpeg/png/... stuff.
as for the backtrace: that's described in the page you should've read
before submiting: http://bugs.php.net/how-to-report.php
Previous Comments:
------------------------------------------------------------------------
[2002-08-30 11:07:48] bugsphp@yayel.com
Apache reports several times in error_log strings like that one: [Fri
Aug 30 17:00:17 2002] [notice] child pid 29648 exit signal Segmentation
fault (11)
------------------------------------------------------------------------
[2002-08-30 11:05:19] bugsphp@yayel.com
Sorry Cynic, I don't really have a debugging experience.
I did not know what to cut (that's why code is not published here), but
know that everything gets ok if ImageCreateTrueColor() (line 91) is
replaced by ImageCreate().
I'll rebuild php, please tell me how to find the backtrace.
------------------------------------------------------------------------
[2002-08-30 11:01:07] bugsphp@yayel.com
Oh, one last thing: I talked about a bug which may be turn into a
security problem because the *entire* script seems to loop, and because
it *crashes* at the end: there is no html output (IE stops, Mozilla
alerts "this document contains no data").
------------------------------------------------------------------------
[2002-08-30 11:00:01] cynic@php.net
you'll need to cut it down to only the offending code if you want
someone look at it.
the good people who work on php have better things to do than wade
through other people's code, and even more so as 95% of it turns out to
be pilot error.
i know this sounds harsh, but try to look at it from the opposite
side.
now to your problem.
the script running 20 times looks like dying httpd processes, but
that'd be obvious from the apache logs.
if this is the case, rebuild php with --enable-debug, and post a
backtrace.
------------------------------------------------------------------------
[2002-08-30 10:51:35] bugsphp@yayel.com
I decided to publish my code:
http://yayel.com/bug/users_postpicture.php.txt
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/19197
--
Edit this bug report at http://bugs.php.net/?id=19197&edit=1