php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #8011 crash when sess_ files from other users in same directory
Submitted: 2000-11-28 10:04 UTC Modified: 2000-12-03 00:02 UTC
From: s-haa5 at jura dot uni-tuebingen dot de Assigned:
Status: Closed Package: Session related
PHP Version: 4.0.3pl1 OS: FreeBSD
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: s-haa5 at jura dot uni-tuebingen dot de
New email:
PHP Version: OS:

 

 [2000-11-28 10:04 UTC] s-haa5 at jura dot uni-tuebingen dot de
My session files had been stored in the default /tmp directory. Using PHP on a commonly used server (provider) with session files from other users stored there, let PHP craches with the probability of session.gc_probability. (I've no read/write access of the session files of other users.)

PHP is configured using:
--with-mysql=/usr/local --with-config-file-path=/usr/home/as/php --enable-debug=no --enable-track-vars=yes --enable-force-cgi-redirect=yes --enable-trans-sid=yes

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-12-02 09:11 UTC] sas@php.net
Can you post a backtrace which shows where the error happens?

http://bugs.php.net/bugs-generating-backtrace.php


 [2000-12-02 23:46 UTC] s-haa5 at jura dot uni-tuebingen dot de
Now I know, that session.auto_start need to be enabled. Thank you.

session.auto_start        = 1
session.save_path         = /tmp
session.gc_probability    = 100

Program terminated with signal 11, Segmentation fault.
Cannot access memory at address 0x200d4080.
#0  0xb79b in php_readdir_r (dirp=0xfdac0, entry=0xefbfd39c, result=0xefbfcf34)
    at reentrancy.c:130
130                     memcpy(entry, ptr, sizeof(*ptr));
(gdb) bt
#0  0xb79b in php_readdir_r (dirp=0xfdac0, entry=0xefbfd39c, result=0xefbfcf34)
    at reentrancy.c:130
#1  0x1d464 in ps_files_cleanup_dir (dirname=0xe136c "/tmp", maxlifetime=1440)
    at mod_files.c:168
#2  0x1d725 in ps_gc_files (mod_data=0xd8630, maxlifetime=1440,
    nrdels=0xefbfd8e4) at mod_files.c:292
#3  0x1be9b in php_session_start () at session.c:933
#4  0x1d0fa in php_rinit_session (type=1, module_number=3) at session.c:1396
#5  0x68a48 in module_registry_request_startup (module=0x110a80)
    at zend_API.c:838
#6  0x6a0a1 in zend_hash_apply (ht=0xdb4d4,
    apply_func=0x68a30 <module_registry_request_startup>) at zend_hash.c:692
#7  0x66c56 in zend_activate_modules () at zend.c:490
#8  0x4523 in php_execute_script (primary_file=0xefbfd9ec) at main.c:1135
#9  0x26d5 in main (argc=1, argv=0xefbfda28) at cgi_main.c:706

 [2000-12-03 00:02 UTC] sniper@php.net
This is fixed. Please try: http://www.php.net/distributions/php-4.0.4RC3.tar.gz

--Jani
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Tue May 14 03:01:30 2024 UTC