Uploaded image for project: 'phpBB'
  1. phpBB
  2. PHPBB-17032

Missing or invalid user entry for anonymous user may result in stack overflow

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • 3.3.9-RC1
    • 3.3.8
    • None
    • None

      The user_loader's get_user() method does try to fall back to the anonymous user if a certain user couldn't be loaded. It does so by calling itself:

      https://github.com/phpbb/phpbb/blob/master/phpBB/phpbb/user_loader.php#L138

      According to the docblock, it should return "False if the anonymous user was not loaded". That is however not true. When the anonymous user was not loaded, it will try loading the anonymous user and call itself again to return the user data. However, in cases where the anonymous user's data couldn't be retrieved, it'll just continue calling itself.

      This then results in a stack overflow and a segmentation fault for PHP.

            Marc Marc
            Marc Marc
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: