#3583 closed Bug (fixed)

blank page in piwik because of file core/lic.log

Reported by: Strubbl Owned by:
Priority: normal Milestone: 1.10 - Piwik 1.10
Component: Website piwik.org Keywords:
Cc: Sensitive: no

Description

After the update from 1.9.1 to 1.9.2 with the auto updater i get a blank page. So i reinstalled piwik. The first call of the website (index.php) was okay. On a refresh i get a blank page. I thought it has something to do with files in the tmp/ folder. But it doesn't. Still blank pages on a fresh install. So I made a diff between the file list of a fresh piwik installation and after the one click in the browser. Then I saw a file which caused the error. It is the file core/lic.log. After deletion of that file piwik works again, but only for one click.

What information do you need to analyze the bug?

I have PHP 5.3.3-7+squeeze14 with Suhosin-Patch and MySQL 5.1.63.

Change History (3)

comment:1 Changed 17 months ago by Strubbl

No error in the Apache error.log.

comment:2 Changed 17 months ago by Strubbl

After deleting the file and then making one click, deleting the file again and so on, I found a file integrity check failing. Sorry, but the error message only in german:

Die Integritätsprüfung ist fehlgeschlagen und hat Fehler ausgegeben. Dies geschieht häufig durch Fehler beim Hochladen der Piwik-Dateien. Laden Sie die Piwik-Dateien im BINARY-Modus erneut hoch und aktualisieren Sie diese Seite, bis keine Fehler mehr vorhanden sind.
Unterschiedliche Dateigröße: piwik/core/Loader.php (erwartete Größe: 2873, gefunden: 4952)

But it _is_ the original file from the zip. I loaded it from here: http://piwik.org/latest.zip. But this file does not work. So i loaded the file https://github.com/piwik/piwik/archive/1.9.2.tar.gz

This works for me. I could reinstall piwik with that installation files.

comment:3 Changed 17 months ago by vipsoft (robocoder)

  • Component changed from Core to Website piwik.org
  • Milestone set to 1.9.3 - Piwik 1.9.3
  • Resolution set to fixed
  • Status changed from new to closed

Thanks for the report. The packages have been restored from backup and we'll continue to investigate how the packages were compromised.

Out of abundance of caution, you should have removed the previous installation (instead of overwriting). For example, core/DataTable/Filter/Megre.php should not exist.

Note: See TracTickets for help on using tickets.