ID: 42059 Updated by: [EMAIL PROTECTED] Reported By: spam2 at rhsoft dot net -Status: Open +Status: Bogus Bug Type: Apache2 related Operating System: Fedora 7 PHP Version: 5CVS-2007-07-21 (snap) New Comment:
That's not a bug but a bug that was fixed. (CVE-2007-3378) Previous Comments: ------------------------------------------------------------------------ [2007-07-22 16:53:50] spam2 at rhsoft dot net I found the problem! <?php phpinfo(); ?> works <?php session_start(); phpinfo(); ?> brings Warning: session_start() [function.session-start.php]: open_basedir restriction in effect. File(/var/www/sessiondata) is not within the allowed path(s): (/mnt/data/www/www.rhsoft.net:/mnt/data/www/phpincludes:/usr/share/pear:/var/www/uploadtemp) in /mnt/data/www/www.rhsoft.net/test.php on line 2 Fatal error: session_start() [<a href='http://at.php.net/manual/de/function.session-start.php'>function.session-start.php</a>]: Failed to initialize storage module: files (path: /var/www/sessiondata) in /mnt/data/www/www.rhsoft.net/test.php on line 2 It was invisible because in my central library with autoloading and much functions there is a @session_start(); to dont show warnings if anyone has startet a session oder sendt headers before including Its the same with the last snapshot On a other machine a snapshot from 08.07.2007 i think does without troubles ------------------------------------------------------------------------ [2007-07-21 16:13:58] [EMAIL PROTECTED] And shouldn't you stop apache before doing 'make install' ? Anyway, then run apache like this: # gdb --arg httpd -X (gdb) run Try access a page and see if it crashes.. ------------------------------------------------------------------------ [2007-07-21 16:12:02] [EMAIL PROTECTED] Try building with this configure line instead (and do not set any cflags/etc): # rm config.cache && ./configure --with-apxs2 --disable-all --enable-debug ------------------------------------------------------------------------ [2007-07-21 13:17:05] spam2 at rhsoft dot net Description: ------------ Since some days the snapshot-builds from source under fedora 7 does produce a white page with HTTP-Status 500 and without any messages in logfiles. I have built it every second day and now it will not run, the cli semms to work normal If i use the 5.2.3-sources with the same build--script all works perfect Reproduce code: --------------- export CFLAGS="-O3 -march=i686 -mcpu=i686 -mtune=i686 -mmmx -msse3 -fopenmp" export CXX=gcc export CXXFLAGS="-O3 -march=i686 -mcpu=i686 -mtune=i686 -mmmx -msse3 -fopenmp" export PHP_PREFIX="/usr" # In den Source-Folder wechseln cd /data/development/src/php/ # Config-Cache falls vorhanden entfernen und aufräumen um Probleme zu vermeiden rm -f ./config.cache > /dev/null make clean > /dev/null # Configure-Optionen setzen ./configure \ --with-apxs2=/usr/sbin/apxs \ --with-pear=/usr/share/pear \ --build=i686-redhat-linux-gnu \ --host=i686-redhat-linux-gnu \ --target=i686-redhat-linux-gnu \ --prefix=$PHP_PREFIX \ --sysconfdir=/etc \ --localstatedir=/var \ --disable-debug \ --disable-rpath \ --disable-ipv6 \ --disable-dba \ --without-odbc \ --without-unixODBC \ --without-gdbm \ --enable-inline-optimization \ --enable-exif \ --enable-ftp \ --enable-sockets \ --enable-yp \ --enable-wddx \ --enable-memory-limit \ --enable-calendar \ --enable-mbstring \ --enable-soap \ --enable-bcmath \ --enable-gd-native-ttf \ --enable-zip \ --with-readline \ --with-libdir=lib \ --with-config-file-path=/etc \ --with-exec-dir=/usr/bin \ --with-freetype-dir=/usr \ --with-png-dir=/usr \ --with-jpeg-dir=/usr \ --with-expat-dir=/usr \ --with-pcre-regex=/usr \ --with-libxml-dir=/usr \ --with-mysql=/usr/local/mysql \ --with-mysql-sock=/var/lib/mysql \ --with-mysqli \ --with-curl \ --with-gettext \ --with-iconv \ --with-openssl \ --with-png \ --with-bz2 \ --with-zlib \ --with-layout=GNU \ --with-xml \ --with-xmlrpc \ --with-mssql \ --with-pgsql \ --with-pdo-mysql \ --with-pdo-pgsql \ --with-pdo-sqlite \ --with-tidy \ --with-mcrypt \ --with-mhash \ --with-gd \ --with-ttf \ --with-kerberos \ --with-ldap \ --with-imap \ --with-imap-ssl \ && make \ && strip .libs/libphp5.so \ && strip sapi/cli/php \ && sudo make install \ && sudo /sbin/service httpd restart # Aufräumen make clean > /dev/null rm -f ./config.cache > /dev/null Expected result: ---------------- a running apache-module Actual result: -------------- a white page ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=42059&edit=1
