php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #8011 crash when sess_ files from other users in same directory
Submitted: 2000-11-28 10:04 UTC Modified: 2000-12-03 00:02 UTC
From: s-haa5 at jura dot uni-tuebingen dot de Assigned:
Status: Closed Package: Session related
PHP Version: 4.0.3pl1 OS: FreeBSD
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: s-haa5 at jura dot uni-tuebingen dot de
New email:
PHP Version: OS:

 

 [2000-11-28 10:04 UTC] s-haa5 at jura dot uni-tuebingen dot de 
My session files had been stored in the default /tmp directory. Using PHP on a commonly used server (provider) with session files from other users stored there, let PHP craches with the probability of session.gc_probability. (I've no read/write access of the session files of other users.)

PHP is configured using:
--with-mysql=/usr/local --with-config-file-path=/usr/home/as/php --enable-debug=no --enable-track-vars=yes --enable-force-cgi-redirect=yes --enable-trans-sid=yes

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-12-02 09:11 UTC] sas@php.net 
Can you post a backtrace which shows where the error happens?

http://bugs.php.net/bugs-generating-backtrace.php
 [2000-12-02 23:46 UTC] s-haa5 at jura dot uni-tuebingen dot de 
Now I know, that session.auto_start need to be enabled. Thank you.

session.auto_start        = 1
session.save_path         = /tmp
session.gc_probability    = 100

Program terminated with signal 11, Segmentation fault.
Cannot access memory at address 0x200d4080.
#0  0xb79b in php_readdir_r (dirp=0xfdac0, entry=0xefbfd39c, result=0xefbfcf34)
    at reentrancy.c:130
130                     memcpy(entry, ptr, sizeof(*ptr));
(gdb) bt
#0  0xb79b in php_readdir_r (dirp=0xfdac0, entry=0xefbfd39c, result=0xefbfcf34)
    at reentrancy.c:130
#1  0x1d464 in ps_files_cleanup_dir (dirname=0xe136c "/tmp", maxlifetime=1440)
    at mod_files.c:168
#2  0x1d725 in ps_gc_files (mod_data=0xd8630, maxlifetime=1440,
    nrdels=0xefbfd8e4) at mod_files.c:292
#3  0x1be9b in php_session_start () at session.c:933
#4  0x1d0fa in php_rinit_session (type=1, module_number=3) at session.c:1396
#5  0x68a48 in module_registry_request_startup (module=0x110a80)
    at zend_API.c:838
#6  0x6a0a1 in zend_hash_apply (ht=0xdb4d4,
    apply_func=0x68a30 <module_registry_request_startup>) at zend_hash.c:692
#7  0x66c56 in zend_activate_modules () at zend.c:490
#8  0x4523 in php_execute_script (primary_file=0xefbfd9ec) at main.c:1135
#9  0x26d5 in main (argc=1, argv=0xefbfda28) at cgi_main.c:706
 [2000-12-03 00:02 UTC] sniper@php.net 
This is fixed. Please try: http://www.php.net/distributions/php-4.0.4RC3.tar.gz

--Jani
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Sat Jul 12 13:01:33 2025 UTC