Bug #14232 Updated: Crash of session_start() when client disables cookies and sends a form

ID: 14232 Updated by: yohgaki Reported By: adnev@podvodnik.cz Old Status: Open Status: Feedback Bug Type: Reproducible crash Operating System: Win2000;Win98 PHP Version: 4.0.6 New Comment: Do you have zlib.output_compression=On or/and output_handler set? If so, what is your setting? Do you have ob_end_finish()/ob_end_flush() in your script? Does this happen with 4.1.0RC5? http://www.php.net/~zeev/ Previous Comments: ------------------------------------------------------------------------ [2001-12-06 14:46:24] adnev@podvodnik.cz After additional testing, I discovered that the problems comes from the output buffering. If output_buffering=Off, the problem does not persist. ------------------------------------------------------------------------ [2001-11-26 09:47:07] adnev@podvodnik.cz The function session_start() produces an access violation (drWatson reports the fault in strnatcmp_ex). It happens when the client has disabled cookies. The only setting that prevents the crash is session.use_trans_sid=0, but than sessions are not handled for client without cookies allowed. I've tried a lot of combinations: to pass the PHPSESSID manually in a post/get variable (Input hidden ... =session_id();) but the problem remains the same. For win98, bothe cgi and module versions do not work, under w2k, Apache cannot load the module version (says "cannot find"), so I don't have any idea if the module version could work. ------------------------------------------------------------------------ Edit this bug report at http://bugs.php.net/?id=14232&edit=1