PHP :: Bug #33242 :: mangled error message when stream fails

Bug #33242	mangled error message when stream fails
Submitted:	2005-06-04 15:05 UTC	Modified:	2005-06-06 14:41 UTC
From:	derick@php.net	Assigned:	wez (profile)
Status:	Closed	Package:	HTTP related
PHP Version:	4CVS-2005-06-04 (stable)	OS:	Linux
Private report:	No	CVE-ID:	None

View Developer Edit

Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.

Password:

Status:
Package:
Bug Type:
Summary:
From:	derick@php.net
New email:
PHP Version:		OS:

New Comment:

[2005-06-04 15:05 UTC] derick@php.net

Description:
------------
Error message as shown in output:
Warning: fopen(http://ez:1137/index.php/eZ_accept_path_info_test): failed to open stream: HTTP request failed! Üsr§,úØà{¾RÌé’F“ in /home/httpd/ez_trunk/kernel/setup/ezsetuptests.php on line 343

No script, but valgrind errors:
==21504== Conditional jump or move depends on uninitialised value(s)
==21504==    at 0x1B9077FB: strlen (mac_replace_strmem.c:189)
==21504==    by 0x8097A7E: xbuf_format_converter (spprintf.c:518)
==21504==    by 0x8097E74: vspprintf (spprintf.c:725)
==21504==    by 0x80A0F81: php_stream_wrapper_log_error (streams.c:2653)
==21504==    by 0x8152D46: php_stream_url_wrap_http_ex (http_fopen_wrapper.c:538)
==21504==    by 0x8153975: php_stream_url_wrap_http (http_fopen_wrapper.c:576)
==21504==    by 0x80A10AD: _php_stream_open_wrapper_ex (streams.c:2696)
==21504==    by 0x812271C: php_if_fopen (file.c:1146)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==
==21504== Conditional jump or move depends on uninitialised value(s)
==21504==    at 0x1B907805: strlen (mac_replace_strmem.c:189)
==21504==    by 0x8097A7E: xbuf_format_converter (spprintf.c:518)
==21504==    by 0x8097E74: vspprintf (spprintf.c:725)
==21504==    by 0x80A0F81: php_stream_wrapper_log_error (streams.c:2653)
==21504==    by 0x8152D46: php_stream_url_wrap_http_ex (http_fopen_wrapper.c:538)
==21504==    by 0x8153975: php_stream_url_wrap_http (http_fopen_wrapper.c:576)
==21504==    by 0x80A10AD: _php_stream_open_wrapper_ex (streams.c:2696)
==21504==    by 0x812271C: php_if_fopen (file.c:1146)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==
==21504== Conditional jump or move depends on uninitialised value(s)
==21504==    at 0x1B907805: strlen (mac_replace_strmem.c:189)
==21504==    by 0x809D9FD: display_wrapper_errors (streams.c:200)
==21504==    by 0x80A1191: _php_stream_open_wrapper_ex (streams.c:2758)
==21504==    by 0x812271C: php_if_fopen (file.c:1146)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C7D80: execute (zend_execute.c:2241)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==
==21504== Conditional jump or move depends on uninitialised value(s)
==21504==    at 0x1B907609: strcat (mac_replace_strmem.c:144)
==21504==    by 0x809DAA1: display_wrapper_errors (streams.c:207)
==21504==    by 0x80A1191: _php_stream_open_wrapper_ex (streams.c:2758)
==21504==    by 0x812271C: php_if_fopen (file.c:1146)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C7D80: execute (zend_execute.c:2241)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==
==21504== Conditional jump or move depends on uninitialised value(s)
==21504==    at 0x1B907805: strlen (mac_replace_strmem.c:189)
==21504==    by 0x8097A7E: xbuf_format_converter (spprintf.c:518)
==21504==    by 0x8097E74: vspprintf (spprintf.c:725)
==21504==    by 0x8092B7A: php_verror (main.c:455)
==21504==    by 0x8092FAC: php_error_docref1 (main.c:563)
==21504==    by 0x809DA66: display_wrapper_errors (streams.c:221)
==21504==    by 0x80A1191: _php_stream_open_wrapper_ex (streams.c:2758)
==21504==    by 0x812271C: php_if_fopen (file.c:1146)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==
==21504== Conditional jump or move depends on uninitialised value(s)
==21504==    at 0x812C1D7: php_escape_html_entities (html.c:916)
==21504==    by 0x8092EFA: php_verror (main.c:459)
==21504==    by 0x8092FAC: php_error_docref1 (main.c:563)
==21504==    by 0x809DA66: display_wrapper_errors (streams.c:221)
==21504==    by 0x80A1191: _php_stream_open_wrapper_ex (streams.c:2758)
==21504==    by 0x812271C: php_if_fopen (file.c:1146)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C7D80: execute (zend_execute.c:2241)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==
==21504== Conditional jump or move depends on uninitialised value(s)
==21504==    at 0x1B907805: strlen (mac_replace_strmem.c:189)
==21504==    by 0x8097A7E: xbuf_format_converter (spprintf.c:518)
==21504==    by 0x8097E74: vspprintf (spprintf.c:725)
==21504==    by 0x8093080: php_error_cb (main.c:599)
==21504==    by 0x80B8631: zend_error (zend.c:789)
==21504==    by 0x8092C0F: php_verror (main.c:509)
==21504==    by 0x8092FAC: php_error_docref1 (main.c:563)
==21504==    by 0x809DA66: display_wrapper_errors (streams.c:221)
==21504==    by 0x80A1191: _php_stream_open_wrapper_ex (streams.c:2758)
==21504==    by 0x812271C: php_if_fopen (file.c:1146)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==
==21504== Conditional jump or move depends on uninitialised value(s)
==21504==    at 0x809CD09: php_strlcpy (strlcpy.c:58)
==21504==    by 0x80930F0: php_error_cb (main.c:612)
==21504==    by 0x80B8631: zend_error (zend.c:789)
==21504==    by 0x8092C0F: php_verror (main.c:509)
==21504==    by 0x8092FAC: php_error_docref1 (main.c:563)
==21504==    by 0x809DA66: display_wrapper_errors (streams.c:221)
==21504==    by 0x80A1191: _php_stream_open_wrapper_ex (streams.c:2758)
==21504==    by 0x812271C: php_if_fopen (file.c:1146)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==    by 0x80C688C: execute (zend_execute.c:1700)
==21504==
==21504== Conditional jump or move depends on uninitialised value(s)
==21504==    at 0x1B907805: strlen (mac_replace_strmem.c:189)
==21504==    by 0x8097A7E: xbuf_format_converter (spprintf.c:518)
==21504==    by 0x8097E74: vspprintf (spprintf.c:725)
==21504==    by 0x8092AD7: php_printf (main.c:428)
==21504==    by 0x809329C: php_error_cb (main.c:665)
==21504==    by 0x80B8631: zend_error (zend.c:789)
==21504==    by 0x8092C0F: php_verror (main.c:509)
==21504==    by 0x8092FAC: php_error_docref1 (main.c:563)
==21504==    by 0x809DA66: display_wrapper_errors (streams.c:221)
==21504==    by 0x80A1191: _php_stream_open_wrapper_ex (streams.c:2758)
==21504==    by 0x812271C: php_if_fopen (file.c:1146)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==
==21504== Syscall param writev(vector[...]) points to uninitialised byte(s)
==21504==    at 0x1BC935E8: (within /lib/tls/libc-2.3.2.so)
==21504==    by 0x819A0DF: writev_it_all (in /dat/dev/php/apache_1.3.31/src/httpd)
==21504==    by 0x819A47B: large_write (in /dat/dev/php/apache_1.3.31/src/httpd)
==21504==    by 0x819A546: ap_bwrite (in /dat/dev/php/apache_1.3.31/src/httpd)
==21504==    by 0x81AEA1D: ap_rwrite (in /dat/dev/php/apache_1.3.31/src/httpd)
==21504==    by 0x808BCAA: sapi_apache_ub_write (in /dat/dev/php/apache_1.3.31/src/httpd)
==21504==    by 0x80A3C52: php_ub_body_write_no_header (output.c:689)
==21504==    by 0x80A3CF8: php_ub_body_write (output.c:722)
==21504==    by 0x80A3045: php_end_ob_buffer (output.c:299)
==21504==    by 0x80A3F43: zif_ob_end_flush (output.c:815)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80B8788: zend_execute_scripts (zend.c:935)
==21504==  Address 0x1D148B6B is 6995 bytes inside a block of size 40980 alloc'd
==21504==    at 0x1B90659D: malloc (vg_replace_malloc.c:130)
==21504==    by 0x80AAA5C: _emalloc (zend_alloc.c:164)
==21504==    by 0x80A3543: php_ob_init_named (output.c:435)
==21504==    by 0x80A3693: php_ob_init (output.c:524)
==21504==    by 0x80A2D28: php_start_ob_buffer (output.c:163)
==21504==    by 0x80A3D87: zif_ob_start (output.c:749)
==21504==    by 0x80C6B0C: execute (zend_execute.c:1656)
==21504==    by 0x80B8788: zend_execute_scripts (zend.c:935)
==21504==    by 0x809535C: php_execute_script (main.c:1751)
==21504==    by 0x80CA488: apache_php_module_main (sapi_apache.c:54)
==21504==    by 0x808C897: send_php (in /dat/dev/php/apache_1.3.31/src/httpd)
==21504==    by 0x808C90D: send_parsed_php (in /dat/dev/php/apache_1.3.31/src/httpd)

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

[2005-06-04 15:05 UTC] derick@php.net

Wez, can you please have a look at the code - I gave it a go but could not find something obvious.

[2005-06-06 14:02 UTC] derick@php.net

This is an interesting one :) 

To reproduce:
1. run apache in single process mode (-X)
2. create a PHP script:

<?php
    file_get_contents("http://hostname/file.php");

where hostname points to the apache server, and file.php should be the name of the file you use to test.

3. The following valgrind error shows up then:
==5697== Conditional jump or move depends on uninitialised value(s)
==5697==    at 0x1B9057FB: strlen (mac_replace_strmem.c:189)
==5697==    by 0x80A681D: xbuf_format_converter (spprintf.c:518)
==5697==    by 0x80A6F52: vspprintf (spprintf.c:725)
==5697==    by 0x80B439B: php_stream_wrapper_log_error (streams.c:2653)
==5697==    by 0x81E5E70: php_stream_url_wrap_http_ex (http_fopen_wrapper.c:541)
==5697==    by 0x81E607A: php_stream_url_wrap_http (http_fopen_wrapper.c:576)
==5697==    by 0x80B458A: _php_stream_open_wrapper_ex (streams.c:2696)
==5697==    by 0x81A404A: zif_file_get_contents (file.c:448)
==5697==    by 0x80E727E: execute (zend_execute.c:1656)
==5697==    by 0x80D373B: zend_execute_scripts (zend.c:935)
==5697==    by 0x80A4125: php_execute_script (main.c:1751)
==5697==    by 0x80EC752: apache_php_module_main (sapi_apache.c:54)

[2005-06-06 14:41 UTC] derick@php.net

This bug has been fixed in CVS.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2025 The PHP Group All rights reserved.	Last updated: Thu Jan 30 23:01:30 2025 UTC