From:
Operating system: Debian Squeeze
PHP version: 5.3.8
Package: Session related
Bug Type: Bug
Bug description:Limit to session_regenerate_id updates
Description:
------------
Was doing some debugging on our session class and wanted to start from
scratch on
a few tests so we came up with the following, just to see how frequently we
his
collisions using the default session configs.
It appears that session_regenerate_id quits regenerating after 114 runs,
after
which the function simply fails.
Test script:
---------------
$arr = array();
session_id();
session_start();
for( $i = 0; $i <= 100000; $i++ )
{
$ses = session_id();
if(!session_regenerate_id(true) ) {
exit;
}
echo "Session: ". $ses. "\n";
$arr[$ses]++;
}
print_r( array_count_values( $arr ) );
Expected result:
----------------
Every call to session_regenerate_id and then to session_id would result in
a new
ID, and without limit.
--
Edit bug report at https://bugs.php.net/bug.php?id=60101&edit=1
--
Try a snapshot (PHP 5.4):
https://bugs.php.net/fix.php?id=60101&r=trysnapshot54
Try a snapshot (PHP 5.3):
https://bugs.php.net/fix.php?id=60101&r=trysnapshot53
Try a snapshot (trunk):
https://bugs.php.net/fix.php?id=60101&r=trysnapshottrunk
Fixed in SVN:
https://bugs.php.net/fix.php?id=60101&r=fixed
Fixed in SVN and need be documented:
https://bugs.php.net/fix.php?id=60101&r=needdocs
Fixed in release:
https://bugs.php.net/fix.php?id=60101&r=alreadyfixed
Need backtrace:
https://bugs.php.net/fix.php?id=60101&r=needtrace
Need Reproduce Script:
https://bugs.php.net/fix.php?id=60101&r=needscript
Try newer version:
https://bugs.php.net/fix.php?id=60101&r=oldversion
Not developer issue:
https://bugs.php.net/fix.php?id=60101&r=support
Expected behavior:
https://bugs.php.net/fix.php?id=60101&r=notwrong
Not enough info:
https://bugs.php.net/fix.php?id=60101&r=notenoughinfo
Submitted twice:
https://bugs.php.net/fix.php?id=60101&r=submittedtwice
register_globals:
https://bugs.php.net/fix.php?id=60101&r=globals
PHP 4 support discontinued:
https://bugs.php.net/fix.php?id=60101&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=60101&r=dst
IIS Stability:
https://bugs.php.net/fix.php?id=60101&r=isapi
Install GNU Sed:
https://bugs.php.net/fix.php?id=60101&r=gnused
Floating point limitations:
https://bugs.php.net/fix.php?id=60101&r=float
No Zend Extensions:
https://bugs.php.net/fix.php?id=60101&r=nozend
MySQL Configuration Error:
https://bugs.php.net/fix.php?id=60101&r=mysqlcfg