PHP :: Bug #29333 :: output_buffering + trans_sess

Bug #29333	output_buffering + trans_sess_id can corrupt session
Submitted:	2004-07-22 17:26 UTC	Modified:	2004-07-23 06:14 UTC
From:	alan at akbkhome dot com	Assigned:
Status:	Closed	Package:	Output Control
PHP Version:	4.3.8	OS:	linux debian & redhat
Private report:	No	CVE-ID:	None

View Add Comment Developer Edit

Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If this is not your bug, you can add a comment by following this link.
If this is your bug, but you forgot your password, you can retrieve your password here.

Password:

Status:
Package:
Bug Type:
Summary:
From:	alan at akbkhome dot com
New email:
PHP Version:		OS:

New Comment:

[2004-07-22 17:26 UTC] alan at akbkhome dot com

Description:
------------
if output_buffering is set to 4096 and trans_sess_id is used, the output may be broken:

In the reproduce example, the trans_sess_id writes
<a href="/translators/index.php/calendar/view" ?phpsessid="fa562d5bb14df890e6db68627ea76442">



Reproduce code:
---------------
http://www.akbkhome.com/svn/test_trans/.htaccess
http://www.akbkhome.com/svn/test_trans/test.php
http://www.akbkhome.com/svn/test_trans/home.html.en.php


htaccess includes:

php_value session.use_cookies 0
php_value session.use_trans_sid 1 
php_value output_buffering 4098

test.php just sets up enough variables to render the HTML

home.html.en.php is just a HTML which happens to have the url link in the right place to reproduce the bug.



Expected result:
----------------
on the "View your personal calendar": 

<a href="/translators/index.php/calendar/view?phpsessid=fa562d5bb14df890e6db68627ea76442">



Actual result:
--------------
on the "View your personal calendar": 

<a href="/translators/index.php/calendar/view" ?phpsessid="fa562d5bb14df890e6db68627ea76442">

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports

[2004-07-22 17:30 UTC] alan_k@php.net

Note: this code worked perfectly on 4.3.1

[2004-07-22 18:36 UTC] alan_k@php.net

Relivant changes (as far as I can see) that may have caused this
(possible)
http://cvs.php.net/diff.php/php-src/main/output.c?r1=1.142.2.15&r2=1.142&ty=u

(unlikely)
http://cvs.php.net/diff.php/php-src/ext/standard/url_scanner_ex.re?r1=1.63.2.6&r2=1.63&ty=u

[2004-07-23 05:32 UTC] iliaa@php.net

This bug has been fixed in CVS.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.

[2004-07-23 06:14 UTC] alan_k@php.net

thanks illia - awsome work

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2024 The PHP Group All rights reserved.	Last updated: Thu Apr 18 12:01:28 2024 UTC