ID:               24189
 Updated by:       [EMAIL PROTECTED]
 Reported By:      anton at valuehost dot ru
-Status:           Open
+Status:           Assigned
 Bug Type:         Sockets related
 Operating System: FreeBSD 4.8
-PHP Version:      4.3.2
+PHP Version:      5CVS, 4CVS
-Assigned To:      
+Assigned To:      wez


Previous Comments:
------------------------------------------------------------------------

[2004-07-01 13:53:43] jorton at redhat dot com

This is a real bug.

The issue is that fd_set is a fixed-size array, and if FD_SET is passed
an fd number greater than FD_SETSIZE, it has undefined behaviour, i.e.
it overruns the array and corrupts memory.

All uses of select() in PHP look to be unsafe because of this.  The
proper fix is to use poll() on platforms where it is available, and to
always check that fd < FD_SETSIZE before using FD_SET.

------------------------------------------------------------------------

[2003-06-15 07:31:00] anton at valuehost dot ru

Description:
------------
phpinfo:
http://v6test.valuehost.ru/phpinfo.php

The problem has the following character, after long work php as mod_php
in apache, various variations of sockets, fsockopen, include, fopen and
etc cease to work.

As did not work and curl, but it managed to be solved rebuild libcurl
with FD_SETSIZE=16384 (sys/types.h).

Such sensation that descriptors come to an end.

At occurrence of this problem fsockopen starts to return a mistake "
Operation now in progress "
Function include in general causes Segmentation fault (11)

Unfortunately there is no opportunity to include an option debug as
ZendOptimazer does not work in debug a mode.



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=24189&edit=1

Reply via email to