Re: PHP 4.0 Bug #5271: globalizing HTTP_SESSION_VARS before a session_start() gives a 11mm shot
| From: | Stanislav Malyshev | Date: | Thu, 29 Jun 2000 12:22:04 +0000 |
| Subject: | Re: PHP 4.0 Bug #5271: globalizing HTTP_SESSION_VARS before a session_start() gives a 11mm shot | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-22752@lists.php.net to get a copy of this message | ||
TC>> files, off, on.
TC>>
TC>> you can see all the settings at:
TC>> http://teo.digiro.net/info.php
TC>> and the script at:
TC>> http://teo.digiro.net/devel/php/libdev/test/kill_0.phps
TC>> but I guess there is not much to see :)
OK, I can reporoduce it. There's a bug indeed. Needs to be
fixed. Problematic line is:
ZEND_SET_GLOBAL_VAR_WITH_LENGTH("HTTP_SESSION_VARS",
sizeof("HTTP_SESSION_VARS"), PS(http_session_vars), 1, 0);
line 385 of session.c. It trashes PS(http_session_vars) on the way (seems
that's because it finds HTTP_SESSION_VARS, puts it in
PS(http_session_vars), initializes it and then destroys it as "old value".
--
Stanislav Malyshev stas@zend.com
+972-3-6139665