Package: php5-fpm Version: 5.6.0~rc2+dfsg-3 Severity: normal Tags: patch The 5.6.0~rc2+dfsg-3 version of php5-fpm introduced getallheaders(), but it contains a bug. The keys in the returned array have a null byte as suffix, which breaks expectations and real applications such as Roundcube. Please see attached patch to fix this.
-- Package-specific info: ==== Additional PHP 5 information ==== ++++ PHP 5 SAPI (php5query -S): ++++ fpm cli ++++ PHP 5 Extensions (php5query -M -v): ++++ mcrypt (Enabled for fpm by maintainer script) mcrypt (Enabled for cli by maintainer script) mysql (Enabled for fpm by local administrator) mysql (Enabled for cli by local administrator) pdo_mysql (Enabled for fpm by maintainer script) pdo_mysql (Enabled for cli by maintainer script) mysqlnd (Enabled for fpm by maintainer script) mysqlnd (Enabled for cli by maintainer script) ldap (Enabled for fpm by maintainer script) ldap (Enabled for cli by maintainer script) sqlite3 (Enabled for fpm by maintainer script) sqlite3 (Enabled for cli by maintainer script) gd (Enabled for fpm by maintainer script) gd (Enabled for cli by maintainer script) pdo (Enabled for fpm by maintainer script) pdo (Enabled for cli by maintainer script) readline (Enabled for fpm by maintainer script) readline (Enabled for cli by maintainer script) xmlrpc (Enabled for fpm by maintainer script) xmlrpc (Enabled for cli by maintainer script) curl (Enabled for fpm by maintainer script) curl (Enabled for cli by maintainer script) apcu (Enabled for fpm by maintainer script) apcu (Enabled for cli by maintainer script) opcache (Enabled for fpm by maintainer script) opcache (Enabled for cli by maintainer script) json (Enabled for fpm by maintainer script) json (Enabled for cli by maintainer script) intl (Enabled for fpm by maintainer script) intl (Enabled for cli by maintainer script) xdebug (Enabled for fpm by maintainer script) xdebug (Enabled for cli by maintainer script) pdo_sqlite (Enabled for fpm by maintainer script) pdo_sqlite (Enabled for cli by maintainer script) No module matches mysqlnd.ini No module matches mysqlnd.ini mysqli (Enabled for fpm by local administrator) mysqli (Enabled for cli by local administrator) ++++ Configuration files: ++++ **** /etc/php5/fpm/conf.d/20-mcrypt.ini **** extension=mcrypt.so **** /etc/php5/fpm/conf.d/20-pdo_mysql.ini **** extension=pdo_mysql.so **** /etc/php5/fpm/conf.d/99-custom.ini **** disable_functions = memory_limit = 1024M max_execution_time = 0 error_reporting = E_ALL display_errors = On display_startup_errors = On log_errors = Off date.timezone = Europe/Amsterdam mysqlnd.collect_memory_statistics = On session.gc_maxlifetime = 86400 opcache.enable=1 opcache.enable_cli=1 opcache.memory_consumption=512 opcache.interned_strings_buffer=16 opcache.max_accelerated_files=100000 opcache.max_wasted_percentage=10 opcache.revalidate_freq=0 opcache.fast_shutdown=1 [apc] apc.enable_cli = 1 apc.enabled = 1 apc.entries_hint = 256 apc.gc_ttl = 3600 apc.shm_size = 128M apc.smart = 1 apc.ttl = 3600 **** /etc/php5/fpm/conf.d/20-curl.ini **** extension=curl.so **** /etc/php5/fpm/conf.d/99-radius.ini **** extension=radius.so **** /etc/php5/fpm/conf.d/20-xmlrpc.ini **** extension=xmlrpc.so **** /etc/php5/fpm/conf.d/20-readline.ini **** extension=readline.so **** /etc/php5/fpm/conf.d/20-pdo_sqlite.ini **** extension=pdo_sqlite.so **** /etc/php5/fpm/conf.d/20-json.ini **** extension=json.so **** /etc/php5/fpm/conf.d/20-sqlite3.ini **** extension=sqlite3.so **** /etc/php5/fpm/conf.d/20-xdebug.ini **** zend_extension=xdebug.so **** /etc/php5/fpm/conf.d/10-mysqlnd.ini **** extension=mysqlnd.so **** /etc/php5/fpm/conf.d/20-gd.ini **** extension=gd.so **** /etc/php5/fpm/conf.d/20-mysqli.ini **** extension=mysqli.so **** /etc/php5/fpm/conf.d/20-mysql.ini **** extension=mysql.so **** /etc/php5/fpm/conf.d/20-intl.ini **** extension=intl.so **** /etc/php5/fpm/conf.d/99-xdebug-settings.ini **** xdebug.default_enable = On xdebug.overload_var_dump = On xdebug.cli_color = 1 xdebug.max_nesting_level = 256 xdebug.var_display_max_depth = 4 xdebug.trace_enable_trigger = 1 xdebug.trace_output_name = trace.%t.%r xdebug.profiler_enable = Off xdebug.profiler_enable_trigger = On xdebug.profiler_output_name = profiler.%t.%r xdebug.remote_enable = On xdebug.remote_autostart = Off xdebug.remote_host = 127.0.0.1 xdebug.remote_port = 9000 xdebug.idekey = default **** /etc/php5/fpm/conf.d/20-ldap.ini **** extension=ldap.so **** /etc/php5/fpm/conf.d/10-pdo.ini **** extension=pdo.so **** /etc/php5/fpm/conf.d/20-apcu.ini **** extension=apcu.so **** /etc/php5/fpm/conf.d/05-opcache.ini **** zend_extension=opcache.so -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (920, 'testing'), (910, 'stable'), (900, 'testing-proposed-updates'), (525, 'unstable'), (515, 'experimental'), (500, 'stable-updates') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.15-trunk-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages php5-fpm depends on: ii dpkg 1.17.10 ii init-system-helpers 1.19 ii libbz2-1.0 1.0.6-5 ii libc6 2.19-7 ii libcomerr2 1.42.10-1.1 ii libdb5.3 5.3.28-5 ii libgssapi-krb5-2 1.12.1+dfsg-4 ii libk5crypto3 1.12.1+dfsg-4 ii libkrb5-3 1.12.1+dfsg-4 ii libmagic1 1:5.19-1 ii libonig2 5.9.5-2 ii libpcre3 1:8.31-5 ii libqdbm14 1.8.78-5 ii libssl1.0.0 1.0.1h-3 ii libsystemd-daemon0 208-6 ii libxml2 2.9.1+dfsg1-3 ii mime-support 3.56 ii php5-common 5.6.0~rc2+dfsg-3.1 ii php5-json 1.3.5-3 ii tzdata 2014e-1 ii ucf 3.0030 ii zlib1g 1:1.2.8.dfsg-1 php5-fpm recommends no packages. Versions of packages php5-fpm suggests: pn php-pear <none> Versions of packages php5-common depends on: ii libc6 2.19-7 ii lsof 4.86+dfsg-1 ii psmisc 22.21-2 ii sed 4.2.2-4 ii ucf 3.0030 Versions of packages php5-common suggests: ii php5-apcu [php5-user-cache] 4.0.6-1 -- Configuration Files: /etc/logrotate.d/php5-fpm [Errno 2] No such file or directory: u'/etc/logrotate.d/php5-fpm' /etc/php5/fpm/php-fpm.conf changed [not included] /etc/php5/fpm/pool.d/www.conf [Errno 2] No such file or directory: u'/etc/php5/fpm/pool.d/www.conf' -- no debconf information
diff -Nru php5-5.6.0~rc2+dfsg/debian/changelog php5-5.6.0~rc2+dfsg/debian/changelog --- php5-5.6.0~rc2+dfsg/debian/changelog 2014-07-11 09:51:41.000000000 +0200 +++ php5-5.6.0~rc2+dfsg/debian/changelog 2014-07-17 22:14:12.000000000 +0200 @@ -1,3 +1,10 @@ +php5 (5.6.0~rc2+dfsg-3.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix null byte suffix after keys in getallheaders() result + + -- Oxan van Leeuwen <[email protected]> Thu, 17 Jul 2014 22:14:01 +0200 + php5 (5.6.0~rc2+dfsg-3) unstable; urgency=medium * Remove Sean Finney from Uploaders; Thanks for all the hard work! diff -Nru php5-5.6.0~rc2+dfsg/debian/patches/php-fpm-getallheaders.patch php5-5.6.0~rc2+dfsg/debian/patches/php-fpm-getallheaders.patch --- php5-5.6.0~rc2+dfsg/debian/patches/php-fpm-getallheaders.patch 2014-07-11 09:51:41.000000000 +0200 +++ php5-5.6.0~rc2+dfsg/debian/patches/php-fpm-getallheaders.patch 2014-07-17 22:14:52.000000000 +0200 @@ -63,7 +63,7 @@ + } else { + return; + } -+ add_assoc_stringl_ex(return_value, var, var_len+1, val, val_len, 1); ++ add_assoc_stringl_ex(return_value, var, var_len, val, val_len, 1); + if (str) { + free_alloca(var, use_heap); + }
