Bug #11806 Updated: Using $string = md5($string); crashed HTTP child processes

From: Date: Sun, 09 Sep 2001 11:38:26 +0000
Subject: Bug #11806 Updated: Using $string = md5($string); crashed HTTP child processes
References: 1  Groups: php.dev 
Request: Send a blank email to php-dev+get-65557@lists.php.net to get a copy of this message
ID: 11806
Updated by: derick
Reported By: joe@nowalls.com
Old Status: Assigned
Status: Closed
Bug Type: Reproducible crash
Operating System: Linux 2.2.16
PHP Version: 4.0.6
Assigned To: derick
New Comment:

No feedback, considered fixed.

Previous Comments:
------------------------------------------------------------------------

[2001-07-10 08:55:27] zeev@php.net

This should be fixed in the latest CVS - please let me know if the problem still occurs.


------------------------------------------------------------------------

[2001-07-01 12:14:57] joe@nowalls.com

Derick,

Thanks I did not think to check there this time.  I see the following, even with the the $cipher =
md5() and CleanString functions disabled:

[Sun Jul  1 09:11:55 2001]  Script:  '/home/nerdwww/compose.php'
---------------------------------------
mcrypt.c(1322) : Block 0x08429258 status:
Beginning:      OK (allocated on mcrypt.c:1252, 24 bytes)
      End:      Overflown (magic=0x35653364 instead of 0x2A8FCC84)
                At least 4 bytes overflown
---------------------------------------

Here are the calls I make using mcrypt outside of the compose.php script you have already seen:

http://www.nerdnet.com/functions.phps

Thanks again!

Joe


------------------------------------------------------------------------

[2001-07-01 06:45:31] derick@php.net

Hello,

with debug enabled, do you see any errors in either your httpd errorlog or in /var/log/zenderrors ?

Derick

------------------------------------------------------------------------

[2001-06-30 21:52:11] joe@nowalls.com

Update:

I have compiled php-4.0.6 with --enable-debug to try and get a backtrace, but when I do, the bug
vanishes and the same code no longer crashed my httpd child process.. 

Here is some detailed info:

PHP 4.0.6 config line:
./configure  --with-mysql --with-gd --enable-track-vars --with-jpeg-dir=/usr/local/lib 
--enable-bcmath --with-apache=../apache_1.3.20 --enable-ftp --enable-sockets --with-mcrypt
--enable-debug

and for Apache 1.3.20

EAPI_MM="../mm-1.1.3" \
SSL_BASE="../openssl-0.9.6a" \
./configure \
"--enable-module=ssl" \
"--with-layout=RedHat" \
"--activate-module=src/modules/php4/libphp4.a" \
"--enable-module=rewrite" \

The script that is causing this error is:
http://www.nerdnet.com/compose.phps

As you can see, a use submits a form, which is the source of $cipher, an alphanumeric string, which
is then encrypted and other actions take place after.

I am not using the Zend Optimizer or anything unusual here at all... If I run the httpd thru gdb and
reproduce the crash it gives me an error in shutdown_memory_manager() when it crashes, but not much
else since the bug disappears when I compile in debug into PHP...  If any more info is needed let me
know... Thanks PHP team, you guys rule!!!

Joe



------------------------------------------------------------------------

[2001-06-30 05:10:11] derick@php.net

Can you please post your script as .txt file on the web, so that I can check how the $cipher is
generated?
And is it possibly for you to make a backtrace of this crash
(http://www.php.net/bugs-generating-backtrace.php) as I couldn't reproduce it.

Derick

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/?id=11806


Edit this bug report at http://bugs.php.net/?id=11806&edit=1



Thread (1 message)

  • derick@php.net
  • Unknown Message
    • derick@php.net
« previous php.dev (#65557) next »