#26008 [Opn]: mail() crashes apache with some parameters

ID: 26008 User updated by: rich at tallman dot org Reported By: rich at tallman dot org Status: Open Bug Type: Mail related Operating System: Windows XP PHP Version: 4.3.3 New Comment: More likely cause! -- Emty message parameter may be the cause of the crash.. the following code does *not* crash apache: mail("rich@tallman.org","test message"," ","From: rich@tallman.org\n\nThis is a test message."); Please note the space in the message field. Previous Comments: ------------------------------------------------------------------------ [2003-10-27 14:26:23] rich at tallman dot org Description: ------------ Any script passing invalid headers will result in a crash of the apache web server when using the apache module version of php 4.3.3 (from the binary zip download) This particular type of invalid header is commonly used to circumvent other unpredictable strange behaviors with the mail command. Reproduce code: --------------- mail("rich@tallman.org","test message","","From: rich@tallman.org\n\nThis is a test message."); Expected result: ---------------- Apache will crash (usually creating a windows XP error window) Actual result: -------------- szAppName : Apache.exe szAppVer : 2.0.47.0 szModName : php4ts.dll szModVer : 4.3.3.3 offset : 0009defe ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=26008&edit=1