php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #25192 infinitive loop in SOAP, HTTP layer
Submitted: 2003-08-21 09:47 UTC Modified: 2010-12-29 14:06 UTC
Votes:1
Avg. Score:3.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: novicky at aarongroup dot cz Assigned:
Status: No Feedback Package: SOAP related
PHP Version: Irrelevant OS: all
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: novicky at aarongroup dot cz
New email:
PHP Version: OS:

 

 [2003-08-21 09:47 UTC] novicky at aarongroup dot cz
Description:
------------
I have found a problem in PECL::SOAP extension in the HTTP layer. There is a bug in php_http.c in a piece of code which handles chunked data as a response from soap server. This bug leads to infinite loop when decoding chunked response. I enclose a patch which fixes the problem. 
?
Can someone check it and commit to CVS ? 
?
Thanks
?
Marek


--- php_http.c.orig	2003-08-21 13:21:11.000000000 +0200
+++ php_http.c	2003-08-21 13:21:11.000000000 +0200
@@ -385,10 +385,10 @@
 				http_buf = erealloc(http_buf, http_buf_size + buf_size + 1);
 				len_size = 0;
 				
-				while (http_buf_size < buf_size) {
+				while (len_size < buf_size) {
 					len_size += php_stream_read(stream, http_buf + http_buf_size, buf_size - len_size);
-					http_buf_size += len_size;
 				}
+				http_buf_size += len_size;
 				
 				/* Eat up '\r' '\n' */
 				php_stream_getc(stream);php_stream_getc(stream);



Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-12-09 01:00 UTC] pecl-dev at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 [2010-12-29 14:06 UTC] jani@php.net
-Summary: infinitive loop in PECL::SOAP, HTTP layer +Summary: infinitive loop in SOAP, HTTP layer -Package: PECL related +Package: SOAP related
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sat Dec 21 16:01:28 2024 UTC