Your message dated Fri, 14 Aug 2009 06:32:16 +0000
with message-id <[email protected]>
and subject line Bug#538820: fixed in php-suhosin 0.9.28-1
has caused the Debian Bug report #538820,
regarding php5-suhosin: Random segfault when loading PHP scripts with suhosin
enabled
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
538820: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538820
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: php5-suhosin
Version: 0.9.27-1
Severity: important
On a new clean unstable test setup, I ran into problems with launching a
simple PHP script. It loads initialy - and the next four or five times. Then
apache segfaults:
[Mon Jul 27 11:45:24 2009] [notice] child pid 10362 exit signal Segmentation
fault (11), possible coredump in /tmp
After that segfault, it starts working for some times. Then it segfaults
again. Not reproducable with a single reload.
I'm not deep enough in the subject to determine if this is a php5 or php5-
suhosin problem. Fact is, that the problem is gone when disabling the suhosin
module inside my php5 configuration.
Here's a stacktrace:
r...@frost:/etc/php5/apache2/conf.d# gdb /usr/sbin/apache2 /tmp/core
GNU gdb (GDB) 6.8.50.20090628-cvs-debian
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
(no debugging symbols found)
warning: Can't read pathname for load map: Eingabe-/Ausgabefehler.
Reading symbols from /usr/lib/libpcre.so.3...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libpcre.so.3
Reading symbols from /usr/lib/libaprutil-1.so.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libaprutil-1.so.0
Reading symbols from /usr/lib/libapr-1.so.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libapr-1.so.0
Reading symbols from /lib/i686/cmov/libpthread.so.0...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libpthread.so.0
Reading symbols from /lib/i686/cmov/libc.so.6...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libc.so.6
Reading symbols from /lib/libuuid.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/libuuid.so.1
Reading symbols from /lib/i686/cmov/librt.so.1...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/librt.so.1
Reading symbols from /lib/i686/cmov/libcrypt.so.1...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libcrypt.so.1
Reading symbols from /lib/i686/cmov/libdl.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libdl.so.2
Reading symbols from /usr/lib/libexpat.so.1...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libexpat.so.1
Reading symbols from /lib/ld-linux.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/i686/cmov/libnsl.so.1...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libnsl.so.1
Reading symbols from /lib/i686/cmov/libnss_compat.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libnss_compat.so.2
Reading symbols from /lib/i686/cmov/libnss_nis.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libnss_nis.so.2
Reading symbols from /lib/i686/cmov/libnss_files.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libnss_files.so.2
Reading symbols from /usr/lib/apache2/modules/mod_alias.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_alias.so
Reading symbols from /usr/lib/apache2/modules/mod_auth_basic.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_auth_basic.so
Reading symbols from /usr/lib/apache2/modules/mod_authn_file.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_authn_file.so
Reading symbols from /usr/lib/apache2/modules/mod_authz_default.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_authz_default.so
Reading symbols from /usr/lib/apache2/modules/mod_authz_groupfile.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_authz_groupfile.so
Reading symbols from /usr/lib/apache2/modules/mod_authz_host.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_authz_host.so
Reading symbols from /usr/lib/apache2/modules/mod_authz_user.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_authz_user.so
Reading symbols from /usr/lib/apache2/modules/mod_autoindex.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_autoindex.so
Reading symbols from /usr/lib/apache2/modules/mod_cgi.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_cgi.so
Reading symbols from /usr/lib/apache2/modules/mod_deflate.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_deflate.so
Reading symbols from /usr/lib/libz.so.1...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /usr/lib/apache2/modules/mod_dir.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_dir.so
Reading symbols from /usr/lib/apache2/modules/mod_env.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_env.so
Reading symbols from /usr/lib/apache2/modules/mod_mime.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_mime.so
Reading symbols from /usr/lib/apache2/modules/mod_negotiation.so...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_negotiation.so
Reading symbols from /usr/lib/apache2/modules/libphp5.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/libphp5.so
Reading symbols from /usr/lib/i686/cmov/libssl.so.0.9.8...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/i686/cmov/libssl.so.0.9.8
Reading symbols from /usr/lib/libdb-4.7.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libdb-4.7.so
Reading symbols from /lib/libbz2.so.1.0...(no debugging symbols found)...done.
Loaded symbols for /lib/libbz2.so.1.0
Reading symbols from /lib/i686/cmov/libresolv.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libresolv.so.2
Reading symbols from /lib/i686/cmov/libm.so.6...(no debugging symbols
found)...done.
Loaded symbols for /lib/i686/cmov/libm.so.6
Reading symbols from /usr/lib/libgssapi_krb5.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /usr/lib/libk5crypto.so.3...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /lib/libcom_err.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libxml2.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libxml2.so.2
Reading symbols from /usr/lib/i686/cmov/libcrypto.so.0.9.8...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/i686/cmov/libcrypto.so.0.9.8
Reading symbols from /usr/lib/libkrb5support.so.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libkrb5support.so.0
Reading symbols from /lib/libkeyutils.so.1...(no debugging symbols
found)...done.
Loaded symbols for /lib/libkeyutils.so.1
Reading symbols from /usr/lib/apache2/modules/mod_setenvif.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_setenvif.so
Reading symbols from /usr/lib/apache2/modules/mod_status.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/apache2/modules/mod_status.so
Reading symbols from /usr/lib/php5/20060613+lfs/gd.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/gd.so
Reading symbols from /usr/lib/libgd.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libgd.so.2
Reading symbols from /usr/lib/libt1.so.5...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libt1.so.5
Reading symbols from /usr/lib/libfreetype.so.6...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libfreetype.so.6
Reading symbols from /usr/lib/libX11.so.6...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libX11.so.6
Reading symbols from /usr/lib/libXpm.so.4...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libXpm.so.4
Reading symbols from /usr/lib/libpng12.so.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libpng12.so.0
Reading symbols from /usr/lib/libjpeg.so.62...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libjpeg.so.62
Reading symbols from /usr/lib/libfontconfig.so.1...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libfontconfig.so.1
Reading symbols from /usr/lib/libxcb.so.1...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libxcb.so.1
Reading symbols from /usr/lib/libXau.so.6...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libXau.so.6
Reading symbols from /usr/lib/libXdmcp.so.6...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libXdmcp.so.6
Reading symbols from /usr/lib/php5/20060613+lfs/imap.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/imap.so
Reading symbols from /usr/lib/libc-client.so.2007b...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libc-client.so.2007b
Reading symbols from /lib/libpam.so.0...(no debugging symbols found)...done.
Loaded symbols for /lib/libpam.so.0
Reading symbols from /usr/lib/php5/20060613+lfs/ldap.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/ldap.so
Reading symbols from /usr/lib/libsasl2.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libsasl2.so.2
Reading symbols from /usr/lib/libldap_r-2.4.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libldap_r-2.4.so.2
Reading symbols from /usr/lib/liblber-2.4.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/liblber-2.4.so.2
Reading symbols from /usr/lib/libgnutls.so.26...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libgnutls.so.26
Reading symbols from /usr/lib/libtasn1.so.3...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libtasn1.so.3
Reading symbols from /usr/lib/libgcrypt.so.11...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libgcrypt.so.11
Reading symbols from /usr/lib/libgpg-error.so.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libgpg-error.so.0
Reading symbols from /usr/lib/php5/20060613+lfs/mhash.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mhash.so
Reading symbols from /usr/lib/libmhash.so.2...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libmhash.so.2
Reading symbols from /usr/lib/php5/20060613+lfs/mysql.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mysql.so
Reading symbols from /usr/lib/libmysqlclient_r.so.15...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libmysqlclient_r.so.15
Reading symbols from /usr/lib/php5/20060613+lfs/mysqli.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mysqli.so
Reading symbols from /usr/lib/php5/20060613+lfs/pdo.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/pdo.so
Reading symbols from /usr/lib/php5/20060613+lfs/pdo_mysql.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/pdo_mysql.so
Reading symbols from /usr/lib/php5/20060613+lfs/recode.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/recode.so
Reading symbols from /usr/lib/librecode.so.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/librecode.so.0
Reading symbols from /usr/lib/php5/20060613+lfs/suhosin.so...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/suhosin.so
Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/libgcc_s.so.1
(no debugging symbols found)
Core was generated by `/usr/sbin/apache2 -k start'.
Program terminated with signal 11, Segmentation fault.
#0 0xb79cd41e in _zend_hash_add_or_update () from
/usr/lib/apache2/modules/libphp5.so
(gdb) bt
#0 0xb79cd41e in _zend_hash_add_or_update () from
/usr/lib/apache2/modules/libphp5.so
#1 0xb79852f4 in php_register_variable_ex () from
/usr/lib/apache2/modules/libphp5.so
#2 0xb77edb1a in ?? () from /usr/lib/apache2/modules/libphp5.so
#3 0xb6636787 in suhosin_input_filter_wrapper () from
/usr/lib/php5/20060613+lfs/suhosin.so
#4 0xb797ed7a in sapi_getenv () from /usr/lib/apache2/modules/libphp5.so
#5 0xb6640316 in suhosin_generate_key () from
/usr/lib/php5/20060613+lfs/suhosin.so
#6 0xb66407cc in ?? () from /usr/lib/php5/20060613+lfs/suhosin.so
#7 0xb786fdc2 in php_session_start () from
/usr/lib/apache2/modules/libphp5.so
#8 0xb7870590 in ?? () from /usr/lib/apache2/modules/libphp5.so
#9 0xb79e08d1 in execute_internal () from /usr/lib/apache2/modules/libphp5.so
#10 0xb663c373 in ?? () from /usr/lib/php5/20060613+lfs/suhosin.so
#11 0xb79f9f40 in ?? () from /usr/lib/apache2/modules/libphp5.so
#12 0xb79e4d20 in execute () from /usr/lib/apache2/modules/libphp5.so
#13 0xb663c84e in ?? () from /usr/lib/php5/20060613+lfs/suhosin.so
#14 0xb79f9b8e in ?? () from /usr/lib/apache2/modules/libphp5.so
#15 0xb79e4d20 in execute () from /usr/lib/apache2/modules/libphp5.so
#16 0xb663c84e in ?? () from /usr/lib/php5/20060613+lfs/suhosin.so
#17 0xb79bf880 in zend_execute_scripts () from
/usr/lib/apache2/modules/libphp5.so
#18 0xb7975983 in php_execute_script () from
/usr/lib/apache2/modules/libphp5.so
#19 0xb7a372a9 in ?? () from /usr/lib/apache2/modules/libphp5.so
#20 0x0807bff9 in ap_run_handler ()
#21 0x0807f391 in ap_invoke_handler ()
#22 0x0808cca0 in ap_process_request ()
#23 0x08089e18 in ?? ()
#24 0x08083379 in ap_run_process_connection ()
#25 0x08091839 in ?? ()
#26 0x08091c1b in ?? ()
#27 0x0809229a in ap_mpm_run ()
#28 0x08068e10 in main ()
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.30-1-686 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages php5-suhosin depends on:
ii libapache2-mod-php5 [php 5.2.10.dfsg.1-2 server-side, HTML-embedded
scripti
ii libc6 2.9-22 GNU C Library: Shared libraries
ii php5-cli [phpapi-2006061 5.2.10.dfsg.1-2 command-line interpreter for the
p
php5-suhosin recommends no packages.
php5-suhosin suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: php-suhosin
Source-Version: 0.9.28-1
We believe that the bug you reported is fixed in the latest version of
php-suhosin, which is due to be installed in the Debian FTP archive:
php-suhosin_0.9.28-1.diff.gz
to pool/main/p/php-suhosin/php-suhosin_0.9.28-1.diff.gz
php-suhosin_0.9.28-1.dsc
to pool/main/p/php-suhosin/php-suhosin_0.9.28-1.dsc
php-suhosin_0.9.28.orig.tar.gz
to pool/main/p/php-suhosin/php-suhosin_0.9.28.orig.tar.gz
php5-suhosin_0.9.28-1_amd64.deb
to pool/main/p/php-suhosin/php5-suhosin_0.9.28-1_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alexander Wirt <[email protected]> (supplier of updated php-suhosin package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 14 Aug 2009 08:09:56 +0200
Source: php-suhosin
Binary: php5-suhosin
Architecture: source amd64
Version: 0.9.28-1
Distribution: unstable
Urgency: low
Maintainer: php-suhosin maintainers <[email protected]>
Changed-By: Alexander Wirt <[email protected]>
Description:
php5-suhosin - advanced protection module for php5
Closes: 538820
Changes:
php-suhosin (0.9.28-1) unstable; urgency=low
.
* New upstream version
- Fixed crash bug with PHP 5.2.10 caused by a
change in extension load order of ext/session
(Closes: #538820)
Checksums-Sha1:
edd43f0041b6b48010039bec2f2141fc223f97af 1292 php-suhosin_0.9.28-1.dsc
edf2f04018870393bb93759f63d3d80ec5b220e9 116008 php-suhosin_0.9.28.orig.tar.gz
f2a75858918f3ae25d99a245316b24b26dfc37d6 6705 php-suhosin_0.9.28-1.diff.gz
b321c6254f6b648674aada08bd149010e8c23049 75074 php5-suhosin_0.9.28-1_amd64.deb
Checksums-Sha256:
b36f24f2b95a6a61d39660185c302f948661a41a43728fa1abb3f763a3dac1e3 1292
php-suhosin_0.9.28-1.dsc
f1a0e3c0619d5af690ddbb975a02a6721431e81dafe3b776eb975e87ed18e409 116008
php-suhosin_0.9.28.orig.tar.gz
5a7f55d2d36018567b2f7a32fd7ca3bae655cdd1277137d95edd25d77b0f023b 6705
php-suhosin_0.9.28-1.diff.gz
a449dc83355980acae195ab1251b7ad90033fa044b30d0a1dd198b9b0c8926c4 75074
php5-suhosin_0.9.28-1_amd64.deb
Files:
0447183a101d3b1e97a73b46690139e8 1292 php optional php-suhosin_0.9.28-1.dsc
e33c74fe910a2812e542417176f34b6d 116008 php optional
php-suhosin_0.9.28.orig.tar.gz
bb6c0e14b7886a8608b1acbb8fa98618 6705 php optional php-suhosin_0.9.28-1.diff.gz
d1032cbe912c703535c53e82d6d900c0 75074 php optional
php5-suhosin_0.9.28-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkqFAE8ACgkQ01u8mbx9AgrCCACfQOOyJHZ1E5RLFlcmlG+mTOD8
cR0AnjGPZ59dUHz+2abim13pDK9Oiy30
=lSCJ
-----END PGP SIGNATURE-----
--- End Message ---
