php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #28808 convert_uudecode() crashes CGI version
Submitted: 2004-06-16 18:06 UTC Modified: 2005-07-23 17:55 UTC
Votes:1
Avg. Score:3.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:1 (100.0%)
From: gphemsley at users dot sourceforge dot net Assigned:
Status: Closed Package: CGI/CLI related
PHP Version: 5.0.0RC3 OS: Windows XP Professional SP1
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: gphemsley at users dot sourceforge dot net
New email:
PHP Version: OS:

 

 [2004-06-16 18:06 UTC] gphemsley at users dot sourceforge dot net
Description:
------------
convert_uudecode() crashes the CGI version of PHP 5.0.0RC3, seemingly trying to parse its contents as PHP code.

Reproduce code:
---------------
<?php

// Temporary
$_REQUEST['file'] = 'C:\\Documents and Settings\\Gordon Hemsley\\Local Settings\\Temp\\3nCryPt\\3nCryPt.enc';

if( isset( $_REQUEST['file'] ) )
{
	print "<pre>\n";

	foreach( file( $_REQUEST['file'] ) as $line )
	{
		print htmlentities( convert_uudecode( $line ) );
	}

	print "</pre>\n";
}

?>


Expected result:
----------------
A decoded version of the file that I provided it.

Actual result:
--------------
It spits out these lines and then dies (causing the Windows Error Reporting window to pop up):
PHP Notice:  Undefined variable:  /a&#9792;&#9578;&#8597;* in D:\Program Files\Apache Group\Apache
\htdocs\uudecode.php5 on line 13
PHP Notice:  Undefined variable:  /a&#9792;&#9578;&#8597;* in D:\Program Files\Apache Group\Apache
\htdocs\uudecode.php5 on line 13

The error reporting data included this:
szAppName : php-cgi.exe     szAppVer : 5.0.0.0     szModName : ntdll.dll     
szModVer : 5.1.2600.1217     offset : 00033aed 

And 2 files.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-06-16 18:10 UTC] gphemsley at users dot sourceforge dot net
I was hoping there were attachments here, but I can't find any. Here are the three files mentioned above:
http://www.music-hq.net/~gphemsley/PHP/3nCryPt.enc
http://www.music-hq.net/~gphemsley/PHP/uudecode_appcompat.txt
http://www.music-hq.net/~gphemsley/PHP/uudecode_php-cgi.exe.mdmp
 [2004-09-14 01:00 UTC] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 [2005-07-23 17:55 UTC] gphemsley at users dot sourceforge dot net
This was fixed by PHP 5.0.2, though I don't know by what. All I know is that I finally looked again at the script that caused the bug and it didn't crash PHP this time.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Wed Jul 02 16:01:37 2025 UTC