Bug 159592 - segmentation fault httpd 2 executing php 4 script
segmentation fault httpd 2 executing php 4 script
Status: CLOSED CANTFIX
Product: Fedora
Classification: Fedora
Component: php (Show other bugs)
3
i386 Linux
medium Severity medium
: ---
: ---
Assigned To: Joe Orton
David Lawrence
: Regression
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2005-06-05 09:37 EDT by Gerd
Modified: 2007-11-30 17:11 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2007-03-10 14:11:04 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Gerd 2005-06-05 09:37:16 EDT
Description of problem:
apache2 produces segmentation fault after accessing php scriptfile.

Version-Release number of selected component (if applicable):
httpd-2.0.52-3.1 (FC3-rpm)
php-4.3.11-2.5 (FC3-rpm)

How reproducible:
Call php script "<?php phpinfo(); ?>" - apache will crash. I tried httpd -X with
same result, error message (in error logfile): 
"[Sun Jun 05 15:34:06 2005] [notice] child pid 10959 exit signal Segmentation
fault (11)"

Steps to Reproduce:
1. httpd 2.0.52 with PHP4 module "LoadModule php4_module modules/libphp4.so"
running.
2. Call any PHP-file and see segmentation fault (no reply from server)
3. Uncommenting "LoadModule" above, normal replies from apache.
  
Actual results:
empty reply from server

Expected results:
phpinfo Output

Additional info:
Last messages (strace'd) are:
=============================
gettimeofday({1117978176, 551645}, NULL) = 0
umask(077)                              = 022
umask(022)                              = 077
getcwd("/root", 4095)                   = 6
chdir("/var/www")                       = 0
lstat64("/var", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
lstat64("/var/www", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
lstat64("/var/www/phpinfo.php", {st_mode=S_IFREG|0664, st_size=24, ...}) = 0
setitimer(ITIMER_PROF, {it_interval={0, 0}, it_value={30, 0}}, NULL) = 0
rt_sigaction(SIGPROF, {0xf6763bde, [PROF], SA_RESTORER|SA_RESTART, 0xf6ca4a48},
{0xf6763bde, [PROF], SA_RESTORER|SA_RESTART, 0xf6ca4a48}, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [PROF], NULL, 8) = 0
getcwd("/var/www", 4096)                = 9
lstat64("/var", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
lstat64("/var/www", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
lstat64("/var/www/phpinfo.php", {st_mode=S_IFREG|0664, st_size=24, ...}) = 0
open("/var/www/phpinfo.php", O_RDONLY)  = 23
fstat64(23, {st_mode=S_IFREG|0664, st_size=24, ...}) = 0
fstat64(23, {st_mode=S_IFREG|0664, st_size=24, ...}) = 0
lseek(23, 0, SEEK_CUR)                  = 0
lseek(23, 0, SEEK_SET)                  = 0
read(23, "<?php\r\n\tphpinfo();\r\n?>\r\n", 8192) = 24
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++
Comment 1 Joe Orton 2005-06-05 17:39:00 EDT
What's the output of:

rpm -V httpd php

Please obtain a backtrace; run

 # echo "CoreDumpDirectory /tmp" > /etc/httpd/conf.d/coredump.conf

and then restart the server, and trigger the crash.  Then run:

 # gdb /usr/sbin/httpd /tmp/core.<pid>
 ...
 (gdb) bt full

Comment 2 John Thacker 2007-03-10 14:11:04 EST
Closing because bug has remained in NEEDINFO state without reply for a long
period of time.

Note that FC3 and FC4 are supported by Fedora Legacy for security
fixes only.  Please install a still supported version and retest.  If
it still occurs on FC5 or FC6, please reopen and assign to the correct
version.  Otherwise, if this a security issue, please change the
product to Fedora Legacy.  Thanks, and we are sorry that we did not
get to this bug earlier.

This bug was originally filed against a much earlier version of Fedora
Core, and significant changes have taken place since the last version
for which this bug is confirmed.

Note You need to log in before you can comment on or make changes to this bug.