Bug #70506 [NEW]: Crash due to uninitialised variable in user-space session handler

From: lbarnaud@php.net Operating system: PHP version: master-Git-2015-09-15 (Git) Package: Session related Bug Type: Bug Bug description:Crash due to uninitialised variable in user-space session handler Description: ------------ There is an issue in the user-space session handler implementation that can leave a variable uninitialised. This causes random crashes or memory exhaustions. See https://github.com/php/php-src/blob/6065b29fe41f09e01dd06ba21980e0344f13230c/ext/session/mod_user.c#L122 When SessionHandlerInterface::read() returns anything that's not a string, val is left uninitialised. I've seen this bug causing crashed and memory exhaustions. -- Edit bug report at https://bugs.php.net/bug.php?id=70506&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=70506&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=70506&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=70506&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=70506&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=70506&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=70506&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=70506&r=needscript Try newer version: https://bugs.php.net/fix.php?id=70506&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=70506&r=support Expected behavior: https://bugs.php.net/fix.php?id=70506&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=70506&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=70506&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=70506&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=70506&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=70506&r=dst IIS Stability: https://bugs.php.net/fix.php?id=70506&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=70506&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=70506&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=70506&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=70506&r=mysqlcfg