#29373 [Opn->Bgs]: Possibly DOS exploit using get_headers function

ID: 29373 Updated by: gschlossnagle@php.net Reported By: zbuckholz at hotmail dot com -Status: Open +Status: Bogus Bug Type: Reproducible crash Operating System: Linux RedHat 9 PHP Version: 5.0.0 New Comment: Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php You've coded an infinite loop, those tend to exhaust resources. Previous Comments: ------------------------------------------------------------------------ [2004-07-25 07:59:54] zbuckholz at hotmail dot com Description: ------------ Short example below will cause complete exhaustion. Seems to cause loop of some sort. <?php $server_name = ("http://" . $_SERVER['SERVER_NAME']); print_r(get_headers($server_name,true)); ?> from apache error log [Sat Jul 24 22:21:15 2004] [error] server reached MaxClients setting, consider raising the MaxClients setting Reproduce code: --------------- <?php $server_name = ("http://" . $_SERVER['SERVER_NAME']); print_r(get_headers($server_name)); ?> Expected result: ---------------- I expect to see what the documentation says I should see. But in the example code the $url is being provided to the get_headers function as a predefined string. Actual result: -------------- [Sat Jul 24 22:21:15 2004] [error] server reached MaxClients setting, consider raising the MaxClients setting ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=29373&edit=1