#45822 [Com]: Invalid value passed to StrToTime crashes W3WP process

 ID:               45822
 Comment by:       amelek32 at gmail dot com
 Reported By:      matt at neimeyer dot org
 Status:           Open
 Bug Type:         Reproducible crash
 Operating System: Windows 2003
 PHP Version:      5.2.6
 New Comment:

<?
echo strtotime('-24 0720080000Thu');

This is enought to this bug. It doesn't really crash, it rather goes to
endless loop.

Tested on Apache + PHP 5.2.6 on Windows XP x64


Previous Comments:
------------------------------------------------------------------------

[2008-08-14 16:04:22] matt at neimeyer dot org

Description:
------------
Using a stock installation of PHP 5.2.6 (or 5.2.5 or 5.2.3) as an ISAPI
module on Windows 2003 Standard Edition x32 (fully updated using Windows
Update), if you pass a "wacky" value to strtotime the w3wp.exe (IIS
Worker Pool) spikes to 99% and crashes the web server.

We accidentally used date("-24 hours") instead of strtotime("-24
hours") and then passed that (via some intermediary function calls) to
strtotime.

It does not crash on Win2003 SE x64 (or any other operating system that
we run this application on).

I am aware of other w3wp.exe bugs being reported but those do not seem
to match this specific cause. Similarly, strtotime bugs don't seem to
match.

Reproduce code:
---------------
echo strtotime(date("-24 hours"));

Expected result:
----------------
Return false or -1

(with the caveat that I know it's "bad code" on my part)

Actual result:
--------------
w3wp.exe crashes as soon as the page starts to load.

Watching in task manager on the web server, you can see w3wp.exe spike
to 99% then stay there. If you kill the task the web server behaves
oddly, generating "Service Unavailable" results to the end browser until
the "World Wide Web Publishing Service" is restarted.


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=45822&edit=1