sektioneins / suhosin7

Suhosin Extension for PHP 7.x
https://www.suhosin.org
Other
120 stars 25 forks source link

php 7.0.19 / Zend engine bug #19

Open EulogySnowfall opened 7 years ago

EulogySnowfall commented 7 years ago

Distribution Fedora 25 PHP version 7.0.19

See installation log for details


Result :

Suhosin doesn't look to be integreted to Zend Engine

Fedora 25 under php 7.0.19 (with sohosin7) This program makes use of the Zend Scripting Language Engine: Zend Engine v3.0.0, Copyright (c) 1998-2017 Zend Technologies .... no suhosin mention...

vs Fedora 24 under php 5.6.30 (with suhosin)

This program makes use of the Zend Scripting Language Engine: Zend Engine v2.6.0, Copyright (c) 1998-2016 Zend Technologies with Suhosin v0.9.38, Copyright (c) 2007-2015, by SektionEins GmbH

Symptome under php 7: When I put

php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec"

in the httpd vhost conf I've got a

zend_mm_heap corrupted.. Can't reach the web site.

Any clue to fix it?

Thank you! suhosin_install.txt

Eulogy