|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
[2004-01-30 12:22 UTC] sniper@php.net
[2004-02-04 19:17 UTC] sniper@php.net
|
|||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Wed Nov 05 09:00:01 2025 UTC |
Description: ------------ In incorrect data passed to session_decode function PHP engine may crash. Reproduce code: --------------- Made session dump with: $f=fopen("$name.profile","w"); fwrite($f,session_encode()); fclose($f); and then if partial read was made before decoding session: $t=fread($f,65000); instead of $t=fread($f,filesize("$name.profile")); so, now in $t there is unclosed strings, brackets.. Now try to make session_decode($t) and php probably crash. Expected result: ---------------- WinXP shows exeption for apache process