php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #4606 Transparent SID causes occasional corruption near <f* tags
Submitted: 2000-05-26 12:03 UTC Modified: 2000-08-01 09:38 UTC
From: brian at kusala dot com Assigned:
Status: Closed Package: Session related
PHP Version: 4.0 Release Candidate 2 OS: Redhat Linux 6.1
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: brian at kusala dot com
New email:
PHP Version: OS:

 

 [2000-05-26 12:03 UTC] brian at kusala dot com 
With Transparent SID on and cookies disabled the system occassionally inserts blocks of gibberish (looks like a buffer overflow?) into the output imediately after <f* tags (in url_scanner.c)

i.e. <font => <f ZZ?̏*?ont
and  <form action=  =>  <formZZ?̏*? action=

The corruption is erratic, email me for a document that causes this problem...

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-07-26 00:52 UTC] zak@php.net 
Very similar to existing bug - likely has same root cause.
See bug #3411
 [2000-07-26 07:09 UTC] hholzgra@php.net 
no, this one is different

#3411 and friends put the session id into the wrong place
but they do not produce rubbish or affect <font> tags ...
 [2000-07-28 17:57 UTC] hholzgra@php.net 
does this still happen with current versions ?
i would really like to know this as i am 
reworking url_scanner() this weekend ...
 [2000-07-28 21:01 UTC] brian at kusala dot com 
Appears to have stopped in 2.0.1pl2 (or at least I havn't seen it since I put the new version on the system)  It was always intermitent however so I can't say for certain that it is fixed or not...
 [2000-08-01 09:38 UTC] hholzgra@php.net 
as transparent SID code was rewritten this should no longer happen
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed Feb 05 13:01:33 2025 UTC