Bug 19906

Summary: PHP 3.0.17-1.6.2 crashes apache reproducable
Product: [Retired] Red Hat Linux Reporter: Ralf Ertzinger <ertzinger>
Component: phpAssignee: Nalin Dahyabhai <nalin>
Status: CLOSED ERRATA QA Contact: Dale Lovelace <dale>
Severity: medium Docs Contact:
Priority: medium    
Version: 6.2CC: geoffrey, malex, mauro, pekkas
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2001-01-20 22:50:57 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ralf Ertzinger 2000-10-27 12:41:53 UTC
The installation machine is a Dual-PPro-200, 1G RAM, RedHat 6.2 Installation, Kernel 2.2.14-5.0 SMP, all security updates applied (apart from 
the kernel).

apache is apache-1.3.14-2.6.2
PHP3 is php-3.0.17-1.6.2

Take this PHP-Script (posttest.php3):
-----------------
<html>
<head>
        <title>PHP Post test</title>
</head>

<body>
<?
echo "submit:$testen:<br>\n";
if($testen=="jetzt"){
        echo "$tester<br>\n";
        }
?>

<form method="post" action="posttest.php3" enctype="multipart/form-data">
<input type="text" size="10" name="tester" value='<? echo $tester; ?>'>
<input type="submit" value="jetzt" name="testen">
</form>

</body>
</html>

--------------------
Pressing the submit-button causes apache to segfault. This happens (as far as my investigations went) only, if
the <form>-Tag contains an enctype-parameter with "multipart/form-data". All other tested enctypes work fine
and as expected.

Comment 1 Pekka Savola 2000-10-28 15:02:37 UTC
There are other issues with PHP 3.0.17 too.  For example, the front page of IMP (www.horde.org) 
makes apache segfault.

Supposedly PHP 3.0.18 is going out soonish, and should fix at least some of the problems.

Comment 2 paluch 2000-11-21 14:22:46 UTC
I must confirm this bug. According to this posting:
http://www.phpbuilder.com/mail/php-general/2000102/0271.php
there is fixed cvs version...


Comment 3 Nalin Dahyabhai 2000-12-20 17:14:17 UTC
We're prepping a 3.0.18 bug-fix for this.

Comment 4 Nalin Dahyabhai 2001-01-11 20:48:09 UTC
*** Bug 23661 has been marked as a duplicate of this bug. ***

Comment 5 Nalin Dahyabhai 2001-01-11 20:49:31 UTC
*** Bug 22455 has been marked as a duplicate of this bug. ***

Comment 6 Bishop Clark 2001-01-20 07:27:44 UTC
Any, uh, action on that?  I don't see anything in the last month or so.  Got an update?



Comment 7 Nalin Dahyabhai 2001-01-20 22:50:54 UTC
Still prepping.  A bug in how 4.0.4 parses multipart form data is also present
in 3.0.18.