[Bug 573591] Re: Uploads greater than 64 kilobytes corrupted when using Apache mod_fcgid

[Martin Pitt]

Accepted libapache2-mod-fcgid into lucid-proposed, the package will
build now and be available in a few hours. Please test and give feedback
here. See https://wiki.ubuntu.com/Testing/EnableProposed for
documentation how to enable and use -proposed. Thank you in advance!

** Changed in: libapache2-mod-fcgid (Ubuntu Lucid)
       Status: New => Fix Committed

** Tags added: verification-needed

-- 
Uploads greater than 64 kilobytes corrupted when using Apache mod_fcgid
https://bugs.launchpad.net/bugs/573591
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in FastCGI interface module for Apache 2: Unknown
Status in “libapache2-mod-fcgid” package in Ubuntu: Fix Released
Status in “libapache2-mod-fcgid” source package in Lucid: Fix Committed
Status in “libapache2-mod-fcgid” package in Debian: Fix Committed

Bug description:
Binary package hint: php5

I run a Mediawiki server which I just recently upgraded to Lucid Lynx.  My wiki's users originally reported issues with uploading PNGs, but further testing on the actual server along with a VM show that it is not MediaWiki itself that is doing this but PHP.  Using a very simple HTML and PHP script setup, I uploaded several files, mainly images but I also uploaded .ZIP files as well.  Under PHP 5.3.2 even using either my full live system or a very basic setup*, all files greater than 64 kilobytes were corrupted at about the 64 kilobyte mark.  The amount of corrupted data varies but it doesn't appear to be more than about 32 kilobytes.

However, in stark contrast, PHP 5.2.10 in Karmic Koala running in another VM works just fine using the exact same "very basic setup".

Both of these setups are running x86-64 installs.  I have yet to try x86-32 installs.

This might be an upstream issue in PHP 5.3.2 since they ditch mime_magic in favor of fileinfo, so I am going to test this in other distributions, notably Debian.

-----

Testcase to reproduce the bug:

- install the following packages: php5-cgi apache2-mpm-worker libapache2-mod-fcgid
- download the testcase from comment #13: http://launchpadlibrarian.net/48980040/modfcgid_testcase.tar.gz
- extract it to /
- execute the command: sudo chown -R www-data:www-data /var/www && sudo service apache2 restart
- go to http://localhost/upload.html and upload a file that is larger than 64KB
- compare the md5sum of the original file with the uploaded file in /var/www/upload/, if they match the bug is fixed