Re: PHP 5.16 and Sihuson
| From: | Chris | Date: | Thu, 19 Oct 2006 00:52:54 +0000 |
| Subject: | Re: PHP 5.16 and Sihuson | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-243324@lists.php.net to get a copy of this message | ||
Google Kreme wrote:
php -v PHP 5.1.6 with Suhosin-Patch 0.9.5 (cli) (built: Oct 18 2006 08:36:59) Copyright (c) 1997-2006 The PHP Group Zend Engine v2.1.0, Copyright (c) 1998-2006 Zend Technologies This configuration cause no end of problems, and I finally compiled php without the Suhosin-Patch. Everything is back to normal and working. with the patch, there were numerous errors and problems: [Wed Oct 18 09:58:05 2006] [error] ALERT - canary mismatch on efree() - heap overflow or double efree detected (attacker 'my.dot.ip.adr', file '/usr/local/www/wordpress/wp-admin/edit.php') [Wed Oct 18 10:26:06 2006] [error] ALERT - canary mismatch on efree() - heap overflow or double efree detected (attacker 'my.dot.ip.adr', file '/usr/local/www/data/phpMyAdmin/index.php') etc. Is it possible to have Suhosin-Patch enabled and somehow avoid these heap overflows, or is Suhosin still not ready for a production environment?Wouldn't it be best to ask whoever the patch came from? -- Postgresql & php tutorials http://www.designmagick.com/