Bug #77178 [Com]: Session id collision detection is broken

Edit report at https://bugs.php.net/bug.php?id=77178&edit=1 ID: 77178 Comment by: derek at garudacrafts dot com Reported by: riikka dot kalliomaki at gmail dot com Summary: Session id collision detection is broken Status: Assigned Type: Bug Package: Session related PHP Version: 7.2.12 Assigned To: yohgaki Block user comment: N Private report: N New Comment: The fix to bug #79091 released on Jan 23, 2020 has exposed the issue described here in bug #77178 and is causing the generation of the erroneous php warnings ("Failed to create new ID"). Thus, all the latest versions of php 7.4.2/7.3.14/7.2.27 have been affected. Anyone using session_create_id() will get these error messages going forward. Time to fix bug #77178? Previous Comments: ------------------------------------------------------------------------ [2020-02-11 18:50:24] derek at garudacrafts dot com Related To: Bug #77178 ------------------------------------------------------------------------ [2020-02-11 18:50:24] derek at garudacrafts dot com Related To: Bug #77178 ------------------------------------------------------------------------ [2020-02-11 18:42:44] derek at garudacrafts dot com Related To: Bug #79091 ------------------------------------------------------------------------ [2020-02-11 17:29:00] derek at garudacrafts dot com In regards to my previous comment, please be advised that I think the issue with calling session_create_id() generating the erroneous PHP Warning "session_create_id(): Failed to create new ID in..." was introduced in the bug fix to #79091 (https://bugs.php.net/bug.php?id=79091). I have added a new comment there with details. ------------------------------------------------------------------------ [2020-02-11 15:39:20] derek at garudacrafts dot com Since php 7.3, whenever I call session_create_id() I get the PHP Warning "session_create_id(): Failed to create new ID in...". However, a new session id IS created, which I can confirm by checking the directory where the session files are saved. So my applications work fine, but my error logs fill up with this new erroneous PHP Warning error message. This does not happen in php 7.2. I have reproduced in both php 7.3 and 7.4, all other things being equal. Could the changes made to the session id collision detection as described in this bug report here have anything to do with it? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=77178 -- Edit this bug report at https://bugs.php.net/bug.php?id=77178&edit=1