php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #1955 SEGV for httpd on error_log
Submitted: 1999-08-04 03:13 UTC Modified: 1999-09-02 18:37 UTC
From: mtippett at ticons dot com dot au Assigned: coar (profile)
Status: Closed Package: Reproducible Crash
PHP Version: 3.0.12 OS: Solaris 2.6/Apache 1.3.6
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: mtippett at ticons dot com dot au
New email:
PHP Version: OS:

 

 [1999-08-04 03:13 UTC] mtippett at ticons dot com dot au 
The following snippett intermitently causes a SEGV.

<?
        $string = "+%28E";

        error_log($string,0);
?>

Looking at other effects of having % in error_log strings it would
appear that error_log uses in some way ?printf(), but does not
have % characters escaped before hand.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [1999-09-02 18:37 UTC] coar at cvs dot php dot net 
You're correct; the problem was that the string was being passed to something that
might treat it as a printf format, rather than running it through "%s" first.  Fixed
in CVS.
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Fri Jul 03 10:00:01 2026 UTC