ID: 44872
Comment by: squarious at gmail dot com
Reported By: mattr at shoplet dot com
Status: No Feedback
Bug Type: MySQLi related
Operating System: FreeBSD 6.2
PHP Version: 5.2.5
New Comment:
I have the same error on 5.2.10 with suhosin patch.
Linux 2.6.31-10-generic #30-Ubuntu SMP Tue Sep 8 12:32:38 UTC 2009
x86_64 GNU/Linux
The tested site was working perfectly on Ubuntu 8.04 LTS with untouched
PHP 5.2.4 (with suhosin patch). The behaviour however is not standard
and it depends if the page is first time visite
Previous Comments:
------------------------------------------------------------------------
[2009-09-09 12:03:27] neofutur dot php at ww7 dot be
update/workaround . . . but scary . . .
someone on ##php tols me to restart apache, that when you get one of
those canary mismatch on efree() you get many until you restart apache.
I didnt pay attention at the beginning but finally tried it.
Its simply true, when you get those messages , restart apache and you
will see no more of them ( until the next apache overflow ? )
------------------------------------------------------------------------
[2009-09-09 10:21:49] neofutur dot php at ww7 dot be
I also tried the code suggested :
<?php
$demo_user[]=(object)array("first" => 1);
$demo_user[]=(object)array("second" => 2);
$demo_user[]=(object)array("third" => 3);
echo "<pre>"; var_dump($demo_user); echo "</pre>";
?>
This doesnt trigger any error message here
------------------------------------------------------------------------
[2009-09-09 10:07:50] neofutur dot php at ww7 dot be
your bugtool dont accept my comment after 40 attempts, so I just post
the pastebin url containing all my comments and logs :
http://dpaste.com/91360/
------------------------------------------------------------------------
[2009-09-09 09:56:15] joeysmith at gmail dot com
Sorry for the noise - testing the assertion that CAPTCHAs are broken.
------------------------------------------------------------------------
[2009-08-20 07:42:34] p dot elagin at gmail dot com
PHP Version 5.2.10-2
Linux xxxxxxx.ru 2.6.26-2-amd64 #1 SMP Fri Aug 14 07:12:04 UTC 2009
x86_64
___
Same Problem
[Thu Aug 20 11:34:09 2009] [error] [client 212.16.10.34] ALERT - canary
mismatch on efree() - heap overflow detected (attacker 'xxxxxxx', file
'xxxxxxx/index.php'), referer: http://text.foothold.ru/index.php
Linux - Debian ( squeeze )
i have this problem when i install 5.2.10-1, i reinstall to 5.2.9 all
is ok. now i update my system and problem restore ((((
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/44872
--
Edit this bug report at http://bugs.php.net/?id=44872&edit=1
