php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #1955 SEGV for httpd on error_log
Submitted: 1999-08-04 03:13 UTC Modified: 1999-09-02 18:37 UTC
From: mtippett at ticons dot com dot au Assigned: coar (profile)
Status: Closed Package: Reproducible Crash
PHP Version: 3.0.12 OS: Solaris 2.6/Apache 1.3.6
Private report: No CVE-ID: None
View Add Comment Developer Edit
Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please !
Your email address:
MUST BE VALID
Solve the problem:
44 - 32 = ?
Subscribe to this entry?

 
 [1999-08-04 03:13 UTC] mtippett at ticons dot com dot au 
The following snippett intermitently causes a SEGV.

<?
        $string = "+%28E";

        error_log($string,0);
?>

Looking at other effects of having % in error_log strings it would
appear that error_log uses in some way ?printf(), but does not
have % characters escaped before hand.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [1999-09-02 18:37 UTC] coar at cvs dot php dot net 
You're correct; the problem was that the string was being passed to something that
might treat it as a printf format, rather than running it through "%s" first.  Fixed
in CVS.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Fri May 10 11:01:32 2024 UTC