From:             ivoras at gmail dot com
Operating system: FreeBSD 6.1
PHP version:      5.1.2
PHP Bug Type:     Reproducible crash
Bug description:  PHP module in apache crashes in session (de)serializer

Description:
------------
PHP module in apache randomly crashes. Tried building debug version of
PHP, but it doesn't change anything (there is no significant additional
data in apache error logs). Attached is the result of Apache modules
mod_whatkilledus and mod_backtrace.

The problem seems to be this: "httpd in malloc(): error: recursive call"
Talking to FreeBSD developers, this most likely happens if an application
tries to use malloc() from a signal handler, while another malloc() is in
progress, which apparently is allowed by GNU malloc() but not by BSD
malloc().

Reproduce code:
---------------
Cannot pinpoint crash location - possibly random or before/after PHP code
starts to execute.

Expected result:
----------------
Normal operation.

Actual result:
--------------
[Tue Apr 25 13:46:26 2006] pid 28734 mod_whatkilledus sig 6 crash
[Tue Apr 25 13:46:26 2006] pid 28734 mod_whatkilledus active connection:
194.213.26.11:60632->161.53.72.111:80 (conn_rec 8498128)
[Tue Apr 25 13:46:26 2006] pid 28734 mod_whatkilledus active request
(request_rec 849e050):
GET
/zvne/alumni?_v1=U-7HlKuFSMHIHduAAExHdmGM_tcn2Vp3MqonoAYek-3EDnfH4VQDVQjKNRBSm6hh&_lid=10213
HTTP/1.1|User-Agent:Mozilla/5.0 (compatib
le;
Pogodak.hr/3.1)|Cookie:phpbb2mysql_sid=c61f99db46b5a2b837340e294ccb5a5a;
phpbb2mysql_data=a%253A2%253A%257Bs%253A11%253A%2522autologin
id%2522%253Bs%253A0%253A%2522%2522%253Bs%253A6%253A%2522userid%2522%253Bi%253A-1%253B%257D;
CMS=6c9d1e5a98c7927a10ff0d0d47e902e1; CMS=6c9d
1e5a98c7927a10ff0d0d47e902e1|Accept-Language:hr|Cache-Control:no-cache|Pragma:no-cache|Host:www.zvne.fer.hr|Accept:text/html,
image/gif, i
mage/jpeg, *; q=.2, */*;
q=.2|Connection:keep-alive|Content-type:application/x-www-form-urlencoded
[Tue Apr 25 13:46:26 2006] pid 28734 mod_whatkilledus end of report
[Tue Apr 25 13:46:26 2006] pid 28734 mod_backtrace backtrace for sig 6
(thread "pid" 28734)
[Tue Apr 25 13:46:26 2006] pid 28734 mod_backtrace main() is at 806a950
0x8071e65 <ap_run_fatal_exception+53> at /usr/local/sbin/httpd
[EMAIL PROTECTED] <ap_run_fatal_exception+255> at /usr/local/sbin/httpd
[EMAIL PROTECTED]
0x284133d4 <abort+84> at /lib/libc.so.6
0x283b9b03 <_UTF8_init+1875> at /lib/libc.so.6
0x283b9b31 <_UTF8_init+1921> at /lib/libc.so.6
0x283babb8 <_UTF8_init+6152> at /lib/libc.so.6
0x28653915 <_emalloc+197> at /usr/local/libexec/apache2/libphp5.so
0x28632152 <vspprintf+382> at /usr/local/libexec/apache2/libphp5.so
0x2862e68b <php_set_error_handling+159> at
/usr/local/libexec/apache2/libphp5.so
0x28669809 <zend_error+165> at /usr/local/libexec/apache2/libphp5.so
0x2865f60d <zend_timeout+53> at /usr/local/libexec/apache2/libphp5.so
0xbfbfff94
0x28653cb7 <_erealloc+179> at /usr/local/libexec/apache2/libphp5.so
0x28611c63 <zif_var_export+4139> at /usr/local/libexec/apache2/libphp5.so
0x28611abd <zif_var_export+3717> at /usr/local/libexec/apache2/libphp5.so
0x28611abd <zif_var_export+3717> at /usr/local/libexec/apache2/libphp5.so
0x28614a87 <php_var_serialize+23> at
/usr/local/libexec/apache2/libphp5.so
0x2894ec16 <ps_srlzr_encode_php+290> at
/usr/local/lib/php/20050922-debug/session.so
0x2894f117 <ps_srlzr_decode_php+507> at
/usr/local/lib/php/20050922-debug/session.so
[Tue Apr 25 13:46:26 2006] pid 28734 mod_backtrace end of backtrace
[Tue Apr 25 13:46:27 2006] [notice] child pid 28734 exit signal Abort trap
(6)
httpd in malloc(): error: recursive call


-- 
Edit bug report at http://bugs.php.net/?id=37197&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37197&r=trysnapshot44
Try a CVS snapshot (PHP 5.1): 
http://bugs.php.net/fix.php?id=37197&r=trysnapshot51
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37197&r=trysnapshot60
Fixed in CVS:                 http://bugs.php.net/fix.php?id=37197&r=fixedcvs
Fixed in release:             
http://bugs.php.net/fix.php?id=37197&r=alreadyfixed
Need backtrace:               http://bugs.php.net/fix.php?id=37197&r=needtrace
Need Reproduce Script:        http://bugs.php.net/fix.php?id=37197&r=needscript
Try newer version:            http://bugs.php.net/fix.php?id=37197&r=oldversion
Not developer issue:          http://bugs.php.net/fix.php?id=37197&r=support
Expected behavior:            http://bugs.php.net/fix.php?id=37197&r=notwrong
Not enough info:              
http://bugs.php.net/fix.php?id=37197&r=notenoughinfo
Submitted twice:              
http://bugs.php.net/fix.php?id=37197&r=submittedtwice
register_globals:             http://bugs.php.net/fix.php?id=37197&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37197&r=php3
Daylight Savings:             http://bugs.php.net/fix.php?id=37197&r=dst
IIS Stability:                http://bugs.php.net/fix.php?id=37197&r=isapi
Install GNU Sed:              http://bugs.php.net/fix.php?id=37197&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37197&r=float
No Zend Extensions:           http://bugs.php.net/fix.php?id=37197&r=nozend
MySQL Configuration Error:    http://bugs.php.net/fix.php?id=37197&r=mysqlcfg

Reply via email to