#26075 [NEW]: File upload leak, cleanup not being performed

From: php at lektec dot com dot au Operating system: FreeBSD 4.7 PHP version: 4.3.3 PHP Bug Type: Scripting Engine problem Bug description: File upload leak, cleanup not being performed Description: ------------ When uploading files via a form. If the user cancels the upload via the stop button in the browser, the php script does not clean up the file reminants. If upload is completed the temporary file /var/tmp/php[A-Za-Z0-9]6 is removed. However in the case when the upload is aborted it is left behind. I have never noticed this before so I assume its new. Currently running a cron job to remove file reminants however this has a nasty sting if it goes unchecked on a server with many file uploads. Note that I am also running php accelerator. './configure' '--enable-versioning' '--enable-memory-limit' '--with-layout=GNU' '--with-zlib-dir=/usr' '--disable-all' '--with-regex=php' '--disable-cli' '--with-apxs=/usr/local/sbin/apxs' '--with-bz2=/usr' '--enable-ctype' '--enable-ftp' '--with-gd' '--enable-gd-native-ttf' '--enable-gd-jis-conv' '--with-freetype-dir=/usr/local' '--with-jpeg-dir=/usr/local' '--with-png-dir=/usr/local' '--with-xpm-dir=/usr/local' '--with-imap=/usr/local' '--with-mysql=/usr/local' '--enable-overload' '--with-pcre-regex=yes' '--enable-posix' '--enable-session' '--with-sybase-ct=/usr/local' '--enable-tokenizer' '--enable-xml' '--with-expat-dir=/usr/local' '--with-zlib=yes' '--prefix=/usr/local' 'i386-portbld-freebsd4.7' -- Edit bug report at http://bugs.php.net/?id=26075&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=26075&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=26075&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=26075&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=26075&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=26075&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=26075&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=26075&r=support Expected behavior: http://bugs.php.net/fix.php?id=26075&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=26075&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=26075&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=26075&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=26075&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=26075&r=dst IIS Stability: http://bugs.php.net/fix.php?id=26075&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=26075&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=26075&r=float