php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #3010 putting --enable-force-cgi-redirect into action causes sig 11
Submitted: 1999-12-20 06:14 UTC Modified: 2000-07-23 02:59 UTC
From: tog at tog dot net Assigned:
Status: Closed Package: Reproducible Crash
PHP Version: 4.0 Beta 3 OS: FreeBSD 3.4-RC
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: tog at tog dot net
New email:
PHP Version: OS:

 

 [1999-12-20 06:14 UTC] tog at tog dot net
Compile php4 beta 3 with --enable-force-cgi-redirect.
Attempt to access /cgi-bin/php directly.

Instead of the "Security Alert!" HTML document being returned, php will exit on signal 11.

Here's the backtrace:
$ gdb php.old php.old.core 
[snip]
Core was generated by `php.old'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libm.so.2...done.
Reading symbols from /usr/lib/libcrypt.so.2...done.
Reading symbols from /usr/local/lib/libpng.so.3...done.
Reading symbols from /usr/lib/libz.so.2...done.
Reading symbols from /usr/local/lib/libintl.so.1...done.
Reading symbols from /usr/local/lib/mysql/libmysqlclient.so.6...done.
Reading symbols from /usr/local/lib/libjpeg.so.9...done.
Reading symbols from /usr/local/lib/libtiff.so.4...done.
Reading symbols from /usr/local/lib/libpdf.so...done.
Reading symbols from /usr/local/pgsql/lib/libpq.so.2...done.
Reading symbols from /usr/lib/libreadline.so.3...done.
Reading symbols from /usr/lib/libhistory.so.3...done.
Reading symbols from /usr/lib/libtermcap.so.2...done.
Reading symbols from /usr/lib/libpam.so.1...done.
Reading symbols from /usr/lib/libc.so.3...done.
Reading symbols from /usr/libexec/ld-elf.so.1...done.
#0  0x0 in ?? ()
(gdb) bt
#0  0x0 in ?? ()
#1  0x8073fec in php_body_write (
    str=0x80fb097 "<b>Security Alert!</b>  PHP CGI cannot be accessed directly.\n\n<P>This PHP CGI binary was compiled with force-cgi-redirect enabled.  This\nmeans that a page will only be served up if the REDIRECT_STATUS"..., 
    str_length=933) at output.c:148
#2  0x806005e in main (argc=1, argv=0xbfbfda30) at cgi_main.c:268
#3  0x805fd51 in _start ()

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-07-23 02:30 UTC] zak at cvs dot php dot net
Please upgrade to the latest version of PHP.
If the error still occurs, please open a new bug report.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sat May 18 03:02:51 2024 UTC