PHP 4.0 Bug #4904: Apache 1.3.1/PHP4.01-dev crashes in sapi_apache_header_handler line 215
| From: | japj at darius dot demon dot nl | Date: | Thu, 08 Jun 2000 14:43:27 +0000 |
| Subject: | PHP 4.0 Bug #4904: Apache 1.3.1/PHP4.01-dev crashes in sapi_apache_header_handler line 215 | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-20576@lists.php.net to get a copy of this message | ||
From: japj@darius.demon.nl
Operating system: Windows 2000
PHP version: 4.0 Latest CVS (08/06/2000)
PHP Bug Type: Reproduceable crash
Bug description: Apache 1.3.1/PHP4.01-dev crashes in sapi_apache_header_handler line 215
Apache 1.3.1/PHP4.01-dev crashes in sapi_apache_header_handler for session_register (mod_php4.c,
line 215)
I attached the Visual V++ 6 debugger and the following is some information I could find:
(local vars of the function):
header_content 0x010f4f04 "PHPSESSID=4d56a099ca75694547d91b3588aa4d5c; path=/"
header_name 0x010f4ef8 "Set-Cookie"
r 0x7ada676f (points to uninitialised memory)
(the call stack):
sapi_apache_header_handler(sapi_header_struct * 0x0128f8a8, sapi_headers_struct * 0x010c1630,
sapi_globals_struct * 0x010c15e8) line 215 + 11 bytes
sapi_add_header(char * 0x010f4ef8, unsigned int 0x0000003e, unsigned char 0x00) line 425 + 23 bytes
_php_session_send_cookie(php_ps_globals * 0x010eb9f8) line 667 + 24 bytes
_php_session_start(php_ps_globals * 0x010eb9f8) line 826 + 9 bytes
php_if_session_register(int 0x00000001, _zval_struct * 0x010ef8a8, _zval_struct * 0x00000000, int
0x00000000, _zend_executor_globals * 0x010e0210) line 1107 + 9 bytes
execute(_zend_op_array * 0x010ede68, _zend_executor_globals * 0x010e0210) line 1574 + 47 bytes
php_execute_script(_zend_file_handle * 0x0128fdf4, _zend_compiler_globals * 0x010c29f8,
_zend_executor_globals * 0x010e0210, _php_core_globals * 0x010eaa00) line 1194 + 22 bytes
apache_php_module_main(request_rec * 0x00fc3140, int 0x00000005, int 0x00000000,
_zend_compiler_globals * 0x010c29f8, _zend_executor_globals * 0x010e0210, _php_core_globals *
0x010eaa00, sapi_globals_struct * 0x010c15e8) line 93 + 22 bytes
send_php(request_rec * 0x00fc3140, int 0x00000000, char * 0x00fc3b18) line 512 + 33 bytes
send_parsed_php(request_rec * 0x00fc3140) line 524 + 13 bytes
APACHECORE! 10004927()
Best regards,
Jeroen Janssen