php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #28808 convert_uudecode() crashes CGI version
Submitted: 2004-06-16 18:06 UTC Modified: 2005-07-23 17:55 UTC
Votes:1
Avg. Score:3.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:1 (100.0%)
From: gphemsley at users dot sourceforge dot net Assigned:
Status: Closed Package: CGI/CLI related
PHP Version: 5.0.0RC3 OS: Windows XP Professional SP1
Private report: No CVE-ID: None
 [2004-06-16 18:06 UTC] gphemsley at users dot sourceforge dot net
Description:
------------
convert_uudecode() crashes the CGI version of PHP 5.0.0RC3, seemingly trying to parse its contents as PHP code.

Reproduce code:
---------------
<?php

// Temporary
$_REQUEST['file'] = 'C:\\Documents and Settings\\Gordon Hemsley\\Local Settings\\Temp\\3nCryPt\\3nCryPt.enc';

if( isset( $_REQUEST['file'] ) )
{
	print "<pre>\n";

	foreach( file( $_REQUEST['file'] ) as $line )
	{
		print htmlentities( convert_uudecode( $line ) );
	}

	print "</pre>\n";
}

?>


Expected result:
----------------
A decoded version of the file that I provided it.

Actual result:
--------------
It spits out these lines and then dies (causing the Windows Error Reporting window to pop up):
PHP Notice:  Undefined variable:  /a&#9792;&#9578;&#8597;* in D:\Program Files\Apache Group\Apache
\htdocs\uudecode.php5 on line 13
PHP Notice:  Undefined variable:  /a&#9792;&#9578;&#8597;* in D:\Program Files\Apache Group\Apache
\htdocs\uudecode.php5 on line 13

The error reporting data included this:
szAppName : php-cgi.exe     szAppVer : 5.0.0.0     szModName : ntdll.dll     
szModVer : 5.1.2600.1217     offset : 00033aed 

And 2 files.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-06-16 18:10 UTC] gphemsley at users dot sourceforge dot net
I was hoping there were attachments here, but I can't find any. Here are the three files mentioned above:
http://www.music-hq.net/~gphemsley/PHP/3nCryPt.enc
http://www.music-hq.net/~gphemsley/PHP/uudecode_appcompat.txt
http://www.music-hq.net/~gphemsley/PHP/uudecode_php-cgi.exe.mdmp
 [2004-09-14 01:00 UTC] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 [2005-07-23 17:55 UTC] gphemsley at users dot sourceforge dot net
This was fixed by PHP 5.0.2, though I don't know by what. All I know is that I finally looked again at the script that caused the bug and it didn't crash PHP this time.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Apr 19 23:01:28 2024 UTC