Hi my PHP log fills with division by zero errors in elggcrypto any ideas of the problem elgg 2.3 php5.5
Thanks
Fred
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
- iionly@iionly
iionly - 0 likes
- doughboy@nubbyless
doughboy - 0 likes
- iionly@iionly
iionly - 0 likes
- doughboy@nubbyless
doughboy - 0 likes
- iionly@iionly
iionly - 0 likes
- Steve Clay@steve_clay
Steve Clay - 0 likes
You must log in to post replies.Does the log entry point to a line number in the file where the error occurs?
its repeating endlessly once every second line 148 in elggcrypto.php
What's your operating system / server setup?
As mentioned at http://stackoverflow.com/questions/18889244/php-5-5-on-windows-microtime-behavior there might be an issue with usage of microtime() on older Windows versions (returning 0). If you have the same issue on Windows it might help to check out http://windowstimestamp.com/ as this seems to have fixed the issue for this guy.
iis 7.5 windows server 2008 PHP 5.5 looks like that's the issue I'm assuming letting it be could cause a security issue or issues with sessions?
Seems a long open bug in php (https://bugs.php.net/bug.php?id=64633) affecting Windows 7 installations. The resolution of the microtime() function is reduced resulting in a runtime measurement of 0 in ElggCrypto (based on microtime() taken before and after the very short running benchmark). Because a division by runtime is done in the following the division by zero error occurs.
According to https://github.com/Elgg/Elgg/issues/8603 it shouldn't affect security.
I've created a pull request that should fix this.