This is a discussion on imagick+bad data within the PHP General forums, part of the PHP Programming Forums category; Hi, I'm running some tests on a php site I'm writing that allows users to upload images to ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi,
I'm running some tests on a php site I'm writing that allows users to upload images to the server, which will take care of sizing them appropriately for display. Has anyone tried to call imagick_readimage on a garbage file? When I try it on my Linux machine to read a file with a .gif extension containing maybe 20 random characters I type in on the keyboard, the apache process consumes 100% cpu and eventually segfaults. It sometimes takes a couple of tries, but the best I've gotten is 1/3 times the process spins. Nice little DOS vulnerability, eh? I'm using Imagick 0.9.8, Apache 2.0.46, PHP 4.3.4 ... any suggestions? |