|  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #36988 mktime freezes on long numbers
Submitted: 2006-04-05 18:24 UTC Modified: 2006-04-11 18:03 UTC
From: virtuall at virtuall dot info Assigned: derick
Status: Closed Package: Date/time related
PHP Version: 5.1.2 OS: Linux, FreeBSD
Private report: No CVE-ID:
 [2006-04-05 18:24 UTC] virtuall at virtuall dot info
I believe it's not a bug, but it's a really good way to lock down the server for a couple of seconds.

Anyway, mktime does not check if 'year' is a valid number. It accepts any integer value and starts counting the seconds.

IMO mktime should have some limit after which the date is considered invalid and it returns FALSE without even starting to count.

Reproduce code:
        $start = microtime(1);
        $a = mktime(1, 1, 1, 1, 1, 11111111111);
        echo number_format(microtime(1) - $start, 2)."\n";

Expected result:

Actual result:


Add a Patch

Pull Requests

Add a Pull Request


AllCommentsChangesGit/SVN commitsRelated reports
 [2006-04-11 18:03 UTC]
This bug has been fixed in CVS.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
Thank you for the report, and for helping us make PHP better.

PHP Copyright © 2001-2015 The PHP Group
All rights reserved.
Last updated: Sun Nov 29 03:01:32 2015 UTC