Edit report at http://bugs.php.net/bug.php?id=47640&edit=1
ID: 47640
Comment by: alex dot linte at gmail dot com
Reported by: manuel dot schmitt at manitu dot de
Summary: Session does not close file in /tmp/
Status: Bogus
Type: Bug
Package: Session related
Operating System: Linux
PHP Version: 5.2.9
Block user comment: N
New Comment:
Hello,
I have the same mistake :
host:~# date
dimanche 24 octobre 2010, 12:10:03 (UTC+0200)
host:~# ps faux | grep php
juritrav 17749 0.0 0.0 118988 11616 ? S 00:11 0:00 | \_
/usr/bin/php-cgi
suphpuser 17818 0.0 0.0 117764 9536 ? S 00:12 0:00 |
\_ /usr/bin/php-cgi
suphpuser 18004 0.0 0.0 117764 9536 ? S 00:14 0:00 |
\_ /usr/bin/php-cgi
suphpuser 12573 0.0 0.1 138812 31784 ? S 09:39 0:00 |
\_ /usr/bin/php-cgi
suphpuser 12574 0.0 0.0 117492 9396 ? S 09:39 0:00 |
\_ /usr/bin/php-cgi
duphpuser 12594 0.0 0.0 117492 9396 ? S 09:39 0:00 |
\_ /usr/bin/php-cgi
suphpuser 12675 0.0 0.0 117764 9536 ? S 09:40 0:00 |
\_ /usr/bin/php-cgi
suphpuser 12682 0.0 0.0 117764 9536 ? S 09:40 0:00 |
\_ /usr/bin/php-cgi
suphpuser 12695 0.0 0.0 117764 9536 ? S 09:40 0:00 |
\_ /usr/bin/php-cgi
So php-cgi scripts run for ever until I kill its manually.
I take the sample of process 18004 :
front2:~# strace -p18004
Process 18004 attached - interrupt to quit
flock(3, LOCK_EX
host# lsof -p18004
....
php-cgi 18004 suphpuser 3uW REG 9,1 7 897723
/tmp/php5/sess_xxxxxxxxxxxxxxxxxxxxxxxx (deleted)
....
So the php script tries to lock a session file (file descriptor 3) that
has been deleted by the PHP garbage collector.
When the garbage collector delete a session file, it doesn't take care
that any php process still using this session file.
Then the php process can't lock the file because it doesn't exist
anymore, the php-cgi process is blocked....
I have the problem with the following version of php :
PHP 5.2.6-1+lenny9 with Suhosin-Patch 0.9.6.2 (cli) (built: Aug 4 2010
06:06:53)
Copyright (c) 1997-2008 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2008 Zend Technologies
with Zend Optimizer v3.3.9, Copyright (c) 1998-2009, by Zend
Technologies
The cron job for php (script that delete session on debian) is disabled
et the garbage collector php is enabled in php.ini file :
session.gc_probability = 1
session.gc_divisor = 100
Sorry for my english.
Alexandre LINTE
Previous Comments:
------------------------------------------------------------------------
[2009-05-03 12:07:47] manuel dot schmitt at manitu dot de
ACK, but as server administrator there *must* be a way to prevent this.
Admins do not have influence on the scripts that are used by
webmasters.
So I think it's a PHP thing. Likely one should automatically close all
sessions that were opened by scripts aborting / running into limits sets
by php (e.g. exec time) etc. This should solve it.
------------------------------------------------------------------------
[2009-05-02 18:42:02] j...@php.net
Endless loops tend to cause such problems. One should always use
http://www.php.net/session_write_close as early as possible to prevent
race conditions and this kind of "bugs".
------------------------------------------------------------------------
[2009-03-17 06:32:36] manuel dot schmitt at manitu dot de
ARGH!
It is so simple!
<?php
session_start();
while (true) { $i *= 2; }
?>
Execute it for the first time and ensure, that it runs into any of the
php limits, e.g. maxmimum execution time.
Call the script a second time while not running into the limit. When
tracing the PHP process you will see an unlimited flock() syscall!
------------------------------------------------------------------------
[2009-03-16 23:46:42] j...@php.net
You need to come up with a script / set of scripts which can be used
to _reliably_ reproduce the issue.
------------------------------------------------------------------------
[2009-03-16 16:29:03] manuel dot schmitt at manitu dot de
But how should I trace this anymore?
I can strace apache/php processes seeing that there is a PHP script
doing flock() on a file, the process never returns.
What should I do?
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/bug.php?id=47640
--
Edit this bug report at http://bugs.php.net/bug.php?id=47640&edit=1
