[PHP-DEV] sessions handling

2004-06-02 Thread Dmitry Ruban
Hi folks, Have no idea is it the proper group to ask my question, any way here it is: We have two instances of apache/mod_php running on 80 and 443 ports accordingly. For both mod_php we have the same dir (/tmp) to store session information. Is it possible to mix sessions data up if user switches

[PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-02 Thread Stefan Esser
Hi, I ported Hardened-PHP to PHP5 yesterday night and got into the problem that there were some crashes. While one of the crashes is a problem in the port (at least I guess so), the other one was a detected double efree() in __set__get_001.phpt I tracked this double free down to static void zen

Re: [PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-02 Thread Stanislav Malyshev
SE>>Z_OBJ_HT_P(object)->write_property(object, property, z TSRMLS_CC); SE>> SE>>within this function z is freed and Why should write_property free z? -- Stanislav Malyshev, Zend Products Engineer [EMAIL PROTECTED] http://www.zend.com/ +972-3-6139665 ext.115 -- PHP Internals - PHP Runtime D

Re: [PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-02 Thread Stefan Esser
Stanislav Malyshev wrote: SE>>Z_OBJ_HT_P(object)->write_property(object, property, z TSRMLS_CC); SE>> SE>>within this function z is freed and Why should write_property free z? static int zend_std_call_setter(zval *object, zval *member, zval *value TSRMLS_DC) { zval **call_args[2];

Re: [PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-02 Thread Stanislav Malyshev
SE>>Maybe you should ask the person who wrote it "why". Well the problem SE>>is not that it frees it. The problem is that the refcount is zero when SE>>the std_setter is called. I think you are right, it should be fixed in zend_post_incdec_property. Do you have reproducing code example so it can

Re: [PHP-DEV] sessions handling

2004-06-02 Thread George Schlossnagle
You're looking for the list php-general. On Jun 2, 2004, at 3:37 AM, Dmitry Ruban wrote: Hi folks, Have no idea is it the proper group to ask my question, any way here it is: We have two instances of apache/mod_php running on 80 and 443 ports accordingly. For both mod_php we have the same dir (/tm

Re: [PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-02 Thread Stefan Esser
Stanislav Malyshev wrote: I think you are right, it should be fixed in zend_post_incdec_property. Do you have reproducing code example so it can be tested? No it cannot be tested. In the default configuration Zend_MM is activated. This will catch double frees. No violation will happen when it i

[PHP-DEV] virtual(), an easy way to put Apache server in spirals down.

2004-06-02 Thread NTPT
Hi. I think following things may be a security risk in mod_php, maybe allowing a DoS attak if your server users can use php engine for your www pages. If you make a file foo.php what contains function virtual(), pointing to itself, ie virtual(foo.php) at least in php 4.3.2 an infinite lo

Re: [PHP-DEV] virtual(), an easy way to put Apache server in spirals down.

2004-06-02 Thread Paul G
do you have a maximum mem restriction in your php.ini? paul - Original Message - From: "NTPT" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 02, 2004 9:48 AM Subject: [PHP-DEV] virtual(), an easy way to put Apache server in spirals down. Hi. I think following things

RE: [PHP-DEV] RC3

2004-06-02 Thread Andi Gutmans
Seems to be some problem with using ZEND_MM in MT servers. I checked on Apache and this behavior doesn't exist. In any case, on windows we have and use a native Win32 per-thread pool so there's no reason to use ZEND_MM. I commited a patch Andi At 07:43 PM 6/1/2004 +0200, Wolfgang Drews wrote: *T

RE: [PHP-DEV] RC3

2004-06-02 Thread Wolfgang Drews
*This message was transferred with a trial version of CommuniGate(tm) Pro* > I commited a patch > Andi great, I'll give you feedback when the next snapshot is ready. cheers -Wolfgang -- PHP-Knotenpunkt Dynamic Web Pages: http://www.dynamicwebpages.de/ Professionelle Lösungen für dynamisches Web

RE: [PHP-DEV] RC3

2004-06-02 Thread Wolfgang Drews
*This message was transferred with a trial version of CommuniGate(tm) Pro* btw., you may have a look at snaps.php.net: Next STABLE Win32 snapshot in: 9 minute(s) Next Latest CVS Win32 snapshot in: please consult /dev/urandom cheers -Wolfgang > -Original Message- > From: Wolfgang Drews

[PHP-DEV] http_build_query unexpected/bad behaviour

2004-06-02 Thread Jochem Maas
I came accross behaviour in http_build_query() which was thoroughly unexpected. first a little background: I am using http_build_query() which is turning out to be very useful for putting together 'complex' URL 'pieces' (which are then again combined to form complete URLs - bare in mind that s

[PHP-DEV] Re: http_build_query unexpected/bad behaviour

2004-06-02 Thread Sara Golemon
> the issue is that the array $y below results in an empty string: > > $x = array('e' => array('kf' => '')); > $y = array('e' => array('kf' => array())); > > echo '\''. http_build_query($x). "'\n"; > echo '\''. http_build_query($y) . "'\n"; > > running on: PHP 5.0.0RC3-dev (cli) (built: Jun 1 2004

Re: [PHP-DEV] virtual(), an easy way to put Apache server in spirals down.

2004-06-02 Thread NTPT
I have max execution time set to 180 and mem limit to 64 mb , there is a 3*128mb physical ram total and about 1G swap space available . Lowering the mem limit helps a bit (take longer time and more requests needed ), but if you do more requests (5 - 10 at almost same time , ie click 10* reload