Re: apache 2.x + php 5.x http post temporary file name non-randomness

2007-11-13 Thread Jeremy Chadwick
On Tue, Nov 13, 2007 at 04:03:51PM +0100, Erik Stian Tefre wrote: > I'd like to find the real reason for the limited number of unique > filenames. Maybe it's related to how mkstemp() or its random number > generator arc4random(3) is used by php and/or apache? This sounds like a (good?) subject f

Re: apache 2.x + php 5.x http post temporary file name non-randomness

2007-11-13 Thread Erik Stian Tefre
Jeremy Chadwick wrote: On Mon, Nov 12, 2007 at 09:21:56PM +0100, Erik Stian Tefre wrote: There seems to be a bug (or feature?) somewhere that limits the number of unique temporary file names used when storing temporary files that are uploaded by posting a form. Looking through my webserver logs

Re: apache 2.x + php 5.x http post temporary file name non-randomness

2007-11-12 Thread Jeremy Chadwick
On Mon, Nov 12, 2007 at 09:21:56PM +0100, Erik Stian Tefre wrote: > There seems to be a bug (or feature?) somewhere that limits the number of > unique temporary file names used when storing temporary files that are > uploaded by posting a form. Looking through my webserver logs of 11 > file

apache 2.x + php 5.x http post temporary file name non-randomness

2007-11-12 Thread Erik Stian Tefre
There seems to be a bug (or feature?) somewhere that limits the number of unique temporary file names used when storing temporary files that are uploaded by posting a form. Looking through my webserver logs of 11 file uploads, I find no more than 495 unique temporary file names which are be