#21564 [NEW]: corrupted paths coming to open_basedir

From: r@orcafat.com Operating system: freebsd 4.6 PHP version: 4.3.0 PHP Bug Type: Apache related Bug description: corrupted paths coming to open_basedir If one is having open_basedir on in one virtualhost, that open_basedir is sometimes applied to another virtualhost without open_basedir restriction. This is NOT a bug in the open_basedir code, but the open_basedir function is feed with the wrong path, and triggers on that one. Looks like some mem corruption or init problem that doesn't clean the variables correctly before serving a new request. Problem occours when a apache child that has served a open_basedir restriced virtualhost, and the next request doesn't have open_basedir on or does have a different open_basedir path. Looks like this only applies to newly started apache childs also. This is critical. './configure' '--with-apxs=/usr/local/sbin/apxs' '--with-config-file-path=/usr/local/etc' '--enable-versioning' '--with-regex=system' '--without-gd' '--without-mysql' '--with-gd=/usr/local' '--enable-gd-native-ttf' '--with-freetype-dir=/usr/local' '--with-jpeg-dir=/usr/local' '--with-png-dir=/usr/local' '--with-zlib' '--with-mysql=/usr/local' '--with-pspell=/usr/local' '--prefix=/usr/local' 'i386-portbld-freebsd4.6' -- Edit bug report at http://bugs.php.net/?id=21564&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=21564&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=21564&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=21564&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=21564&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=21564&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=21564&r=support Expected behavior: http://bugs.php.net/fix.php?id=21564&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=21564&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=21564&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=21564&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=21564&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=21564&r=dst IIS Stability: http://bugs.php.net/fix.php?id=21564&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=21564&r=gnused