Bug #67481 [Com]: Opcache uses wrong file from cache

Edit report at https://bugs.php.net/bug.php?id=67481&edit=1 ID: 67481 Comment by: php-dev at coydogsoftware dot net Reported by: Danack at basereality dot com Summary: Opcache uses wrong file from cache Status: Closed Type: Bug Package: opcache Operating System: Centos PHP Version: 5.5.13 Block user comment: N Private report: N New Comment: I've posted a proposed patch for the cross-user cache access vulnerability to https://bugs.php.net/bug.php?id=69090 . It doesn't solve the problem in all chroot cases, but it will solve it if the chroot environments run PHP scripts as different system users. My fix might not be perfect, but after 2 years of inaction on this bug I think it's better than nothing. Previous Comments: ------------------------------------------------------------------------ [2016-10-28 11:05:51] sander dot dbeer at gmail dot com Problem also exists in PHP 7. Opcache is useless in a chrooted production environment. It's appalling how this problem is ignored ... ------------------------------------------------------------------------ [2016-08-08 11:50:01] spam at rw23 dot de yes, its duplicate. this is a big issue with fatal consequences, and it is still just ignored :( ------------------------------------------------------------------------ [2016-08-08 11:05:49] rgpublic at gmx dot net Related to/Duplicate?: https://bugs.php.net/bug.php?id=69090 ------------------------------------------------------------------------ [2015-11-10 01:31:03] spamto at mailinator dot com Related To: Bug #68965 ------------------------------------------------------------------------ [2015-09-03 10:39:46] admin at 3dr dot org We can confirm that. Because of this bug opcache is unusable in chroot. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=67481 -- Edit this bug report at https://bugs.php.net/bug.php?id=67481&edit=1