[regression] stream_get_wrappers broken

Bug #87481 reported by Piotr Szczepanik on 2007-02-24
254
Affects Status Importance Assigned to Milestone
php5 (Ubuntu)
Undecided
Unassigned
Breezy
Undecided
Martin Pitt
Dapper
Undecided
Martin Pitt
Edgy
Undecided
Martin Pitt

Bug Description

Binary package hint: php5

var_dump(stream_get_wrappers());

produces:
array
  0 => string 'ph' (length=2)
  1 => string 'fil' (length=2)
  2 => string 'htt' (length=3)
  3 => string 'ft' (length=2)
  4 => string 'compress.bzip' (length=13)
  5 => string 'compress.zli' (length=12)
  6 => string 'http' (length=4)
  7 => string 'ftp' (length=3)

should produce:
array
  0 => string 'php' (length=3)
  1 => string 'file' (length=4)
  2 => string 'http' (length=4)
  3 => string 'ftp' (length=3)
  4 => string 'compress.bzip2' (length=14)
  5 => string 'compress.zlib' (length=13)
  6 => string 'https' (length=5)
  7 => string 'ftps' (length=4)

One last char is missing in each array element. phpinfo() presents correct "Registered PHP Streams".
After downgrading to "5.1.6-1ubuntu2" works as it is supposed to.

Introduced probably with:
" * Add debian/patches/CVE-2007-0906_streams.patch:
    - Buffer overflows in the stream filters functions.
    - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/streamsfuncs.c?r1=1.58.2.6.2.12&r2=1.58.2.6.2.13
    - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/streamsfuncs.c?r1=1.98&r2=1.99"

From #ubuntu-devel:

16:18 < impl> keescook: http://cvs.php.net/viewvc.cgi/php-src/main/streams/streams.c?r1=1.82.2.6.2.9&r2=1.82.2.6.2.10&pathrev=php_5_2_1
16:18 < impl> That's the missing changeset
16:18 < impl> I believe, anyway.
16:19 < keescook> impl: and I can test for the breakage/fix just by looking at stream_get_wrappers()'s output?
16:19 < impl> Yep
16:19 < keescook> okay, cool. Thanks!

Kees Cook (kees) wrote :

Rejecting devel task, this is only in Breezy, Dapper, Edgy.

Changed in php5:
status: Unconfirmed → Rejected
assignee: nobody → pitti
status: Unconfirmed → In Progress
assignee: nobody → pitti
status: Unconfirmed → In Progress
assignee: nobody → pitti
status: Unconfirmed → In Progress
Martin Pitt (pitti) wrote :

Fixed packages for all releases prepared, tested, and uploaded. Will publish once everything is built.

Changed in php5:
status: In Progress → Fix Committed
Kees Cook (kees) wrote :

Fixes published as USN-424-2, available on the archives shortly.

Changed in php5:
status: Fix Committed → Fix Released
status: In Progress → Fix Released
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.

Other bug subscribers