[PHP-DEV] Re: PHP 4.0 Bug #7650 Updated: called uninitialized function pointer From: Alexander Savelyev (i <email protected>)
Date: 01/07/01

Bug Database wrote:
>
> ID: 7650
> Updated by: sniper
> Reported By: i <email protected>
> Old-Status: Open
> Status: Feedback
> Bug Type: Reproduceable crash
> Assigned To:
> Comments:
>
> What is this path supposed to fix? And have you tried PHP 4.0.4 to check
> whether it needs this or not?

   PHP 4.0.4 have the same bug. In file sapi/cgi/cgi_main.c on line 445:

                if (!getenv("REDIRECT_STATUS") && !getenv ("HTTP_REDIRECT_STATUS")) {
                        PUTS("<b>Security Alert!</b> PHP CGI cannot be accessed directly.\n\

   PUTS called php_body_write there is not initialized OG(php_body_write).

> return OG(php_body_write)(str, str_length);

gdb trace:
Core was generated by `php'.
Program terminated with signal 11, Segmentation fault.
#0 0x0 in ?? ()
(gdb) bt
#0 0x0 in ?? ()
#1 0x80ab180 in php_body_write (
    str=0x80f85b6 "<b>Security Alert!</b> PHP CGI cannot be accessed directly.\n\n<P>This PHP CGI binary was compiled with force-cgi-redirect enabled. This\nmeans that a page will only be served up if the REDIRECT_STATUS"..., str_length=933) at output.c:81
#2 0x805bc83 in main (argc=1, argv=0x8047cdc) at cgi_main.c:445
#3 0x805b6c7 in __start ()

>
> --Jani
>
> Previous Comments:
> ---------------------------------------------------------------------------
>
> [2000-11-05 19:34:47] i <email protected>
> --- php-4.0.3pl1/sapi/cgi/cgi_main.c.old Wed Oct 11 20:48:44 2000
> +++ php-4.0.3pl1/sapi/cgi/cgi_main.c Mon Nov 6 02:19:44 2000
> @@ -419,6 +419,9 @@
> setmode(_fileno(stderr), O_BINARY); /* make the stdio mode be binary */
> #endif
>
> + if (php_module_startup(&sapi_module)==FAILURE) {
> + return FAILURE;
> + }
>
> /* Make sure we detect we are a cgi - a bit redundancy here,
> but the default case is that we have to check only the first one. */
> @@ -475,9 +478,6 @@
> ap_php_optarg = orig_optarg;
> }
>
> - if (php_module_startup(&sapi_module)==FAILURE) {
> - return FAILURE;
> - }
> #ifdef ZTS
> compiler_globals = ts_resource(compiler_globals_id);
> executor_globals = ts_resource(executor_globals_id);
>
> ---------------------------------------------------------------------------
>
> Full Bug description available at: http://bugs.php.net/?id=7650 

-- 
~.

  Alexander

>>> UNIX System Administrator mailto:i <email protected>

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>