开发者

PHP Error "canary mismatch on efree"

A strange error appeared in the error log in 开发者_如何学编程PHP, but the script that generated this error is often used and never generated this error, and occurred only once so far. Would anyone tell me why this happened?

Error: [client {some IP}] ALERT - canary mismatch on efree() - heap overflow detected (attacker '{some IP}', file '{some script php}')

My server: Apache/2.2.13 (FreeBSD) mod_ssl/2.2.13 OpenSSL/0.9.8k DAV/2 PHP/5.2.11 with Suhosin-Patch with PHP 5.2.11


It means that Suhosin detected a bug in PHP:

http://web.archive.org/web/20140217234227/http://www.suspekt.org/2008/10/12/suhosin-canary-mismatch-on-efree-heap-overflow-detected


Seems like a log entry without the data. Probably a malformed header which was not detected correctly.


The problem is in Suhosin-Patch. Some code structures causes such error. Either remove suhosin patch either try to figure out which part of the code causes such error.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜