Bug #11806: Using $string = md5($string); crashed HTTP child processes
| From: | joe at nowalls dot com | Date: | Fri, 29 Jun 2001 18:04:26 +0000 |
| Subject: | Bug #11806: Using $string = md5($string); crashed HTTP child processes | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-58477@lists.php.net to get a copy of this message | ||
From: joe@nowalls.com
Operating system: Linux 2.2.16
PHP version: 4.0.6
PHP Bug Type: Reproducible crash
Bug description: Using $string = md5($string); crashed HTTP child processes
PHP Options:
'./configure' '--with-mysql' '--with-gd'
'--enable-track-vars' '--with-jpeg-dir=/usr/local/lib'
'--enable-bcmath' '--with-apache=../apache_1.3.20' '--enable-ftp'
'--enable-sockets' '--with-mcrypt'
The problem I am having is:
When using the code:
$cipher = md5($cipher); httpd crashes the current child process with:
[Fri Jun 29 10:54:49 2001] [notice] child pid 9766 exit signal Segmentation fault (11)
[Fri Jun 29 10:54:50 2001] [notice] child pid 9920 exit signal Segmentation fault (11)
The page then fails to load, returning nothing to the browser.
Also, I have another function called CleanSring($string); which looks like:
function CleanString($string)
{
$string = strip_tags($string);
$string =
preg_replace("/<\/?(html|head|meta|title|body|font|img|.jpg|.gif|.vbs|script|tr|table|text).*>/","",$string);
$string =
preg_replace("/<\/?(HTML|HEAD|META|TITLE|BODY|FONT|IMG|.JPG|.GIF|.VBS|SCRIPT|TR|TABLE|TEXT).*>/","",$string);
$string = preg_replace("/<[^>]*>/","",$string);
return $string;
}
Calling this function like:
$string = CleanString($string); causes the same problem.
Whats weird is I call md5() again below the problem code:
$now = date("r");
$thisID = md5(substr(makeID(), 0, 16));
$onetimepass = substr(md5($thisID), 0, 8);
And neither of these causes the same problem, even when being used in the same document.
--
Edit Bug report at: http://bugs.php.net/?id=11806&edit=1