#29333 [NEW]: output_buffering + trans_sess_id can corrupt session

From: alan at akbkhome dot com Operating system: linux debian & redhat PHP version: 4.3.8 PHP Bug Type: Output Control Bug description: output_buffering + trans_sess_id can corrupt session Description: ------------ if output_buffering is set to 4096 and trans_sess_id is used, the output may be broken: In the reproduce example, the trans_sess_id writes <a href="/translators/index.php/calendar/view" ?phpsessid="fa562d5bb14df890e6db68627ea76442"> Reproduce code: --------------- http://www.akbkhome.com/svn/test_trans/.htaccess http://www.akbkhome.com/svn/test_trans/test.php http://www.akbkhome.com/svn/test_trans/home.html.en.php htaccess includes: php_value session.use_cookies 0 php_value session.use_trans_sid 1 php_value output_buffering 4098 test.php just sets up enough variables to render the HTML home.html.en.php is just a HTML which happens to have the url link in the right place to reproduce the bug. Expected result: ---------------- on the "View your personal calendar": <a href="/translators/index.php/calendar/view?phpsessid=fa562d5bb14df890e6db68627ea76442"> Actual result: -------------- on the "View your personal calendar": <a href="/translators/index.php/calendar/view" ?phpsessid="fa562d5bb14df890e6db68627ea76442"> -- Edit bug report at http://bugs.php.net/?id=29333&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=29333&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=29333&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=29333&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=29333&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=29333&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=29333&r=needscript Try newer version: http://bugs.php.net/fix.php?id=29333&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=29333&r=support Expected behavior: http://bugs.php.net/fix.php?id=29333&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=29333&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=29333&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=29333&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=29333&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=29333&r=dst IIS Stability: http://bugs.php.net/fix.php?id=29333&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=29333&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=29333&r=float