php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #904 %n in log_error crashes apache
Submitted: 1998-11-06 14:14 UTC Modified: 1999-09-03 11:29 UTC
From: bschaffner at accentonline dot com Assigned: coar (profile)
Status: Closed Package: Reproducible Crash
PHP Version: 3.0.5 OS: FreeBSD 3.0-RELEASE
Private report: No CVE-ID: None
 [1998-11-06 14:14 UTC] bschaffner at accentonline dot com
I thought it was an apache problem, however, aplog_error (actually ap_log_error) in main.c (224) should escape any % signs before sending the log message to apache. ap_error_log expects a format string followed by varargs - but we're only ever sending the log message - so we need to do a find/replace of every % with %% in order to keep apache from crashing. 

-brian-

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [1999-09-03 11:04 UTC] coar at cvs dot php dot net
Fixed in CVS for 3.0.13 by changing call to aplog_error; use
(..., "%s", log_message) rather than (..., log_message).

 [1999-09-03 11:28 UTC] coar at cvs dot php dot net
(Forgot to set to 'closed')

 [1999-09-03 11:29 UTC] coar at cvs dot php dot net
Argh!
 
PHP Copyright © 2001-2019 The PHP Group
All rights reserved.
Last updated: Tue Dec 10 08:01:24 2019 UTC