Bug#787638: php5-curl: php segfaults immediately with php5-curl installed

2015-06-26 Thread Bruno Muller
Package: php5-curl
Version: 5.6.9+dfsg-1
Followup-For: Bug #787638

Dear Maintainer,

I confirm this bug: I have exactly the same problem on this machine.

-- Package-specific info:
 Additional PHP 5 information 

 PHP 5 SAPI (php5query -S): 
apache2
cli
cgi

 PHP 5 Extensions (php5query -M -v): 
intl (Enabled for apache2 by maintainer script)
intl (Enabled for cli by maintainer script)
intl (Enabled for cgi by maintainer script)
readline (Enabled for apache2 by maintainer script)
readline (Enabled for cli by maintainer script)
readline (Enabled for cgi by maintainer script)
pdo_mysql (Enabled for apache2 by maintainer script)
pdo_mysql (Enabled for cli by maintainer script)
pdo_mysql (Enabled for cgi by maintainer script)
pdo_sqlite (Enabled for apache2 by maintainer script)
pdo_sqlite (Enabled for cli by maintainer script)
pdo_sqlite (Enabled for cgi by maintainer script)
mysql (Enabled for apache2 by maintainer script)
mysql (Enabled for cli by maintainer script)
mysql (Enabled for cgi by maintainer script)
mysqli (Enabled for apache2 by maintainer script)
mysqli (Enabled for cli by maintainer script)
mysqli (Enabled for cgi by maintainer script)
imagick (Enabled for apache2 by maintainer script)
imagick (Enabled for cli by maintainer script)
imagick (Enabled for cgi by maintainer script)
oauth (Enabled for apache2 by maintainer script)
oauth (Enabled for cli by maintainer script)
oauth (Enabled for cgi by maintainer script)
imap (Enabled for apache2 by maintainer script)
imap (Enabled for cli by maintainer script)
imap (Enabled for cgi by maintainer script)
pspell (Enabled for apache2 by maintainer script)
pspell (Enabled for cli by maintainer script)
pspell (Enabled for cgi by maintainer script)
curl (Enabled for apache2 by maintainer script)
curl (Enabled for cli by maintainer script)
curl (Enabled for cgi by maintainer script)
gd (Enabled for apache2 by maintainer script)
gd (Enabled for cli by maintainer script)
gd (Enabled for cgi by maintainer script)
mcrypt (Enabled for apache2 by maintainer script)
mcrypt (Enabled for cli by maintainer script)
mcrypt (Enabled for cgi by maintainer script)
pdo (Enabled for apache2 by maintainer script)
pdo (Enabled for cli by maintainer script)
pdo (Enabled for cgi by maintainer script)
apcu (Enabled for apache2 by maintainer script)
apcu (Enabled for cli by maintainer script)
apcu (Enabled for cgi by maintainer script)
json (Enabled for apache2 by maintainer script)
json (Enabled for cli by maintainer script)
json (Enabled for cgi by maintainer script)
opcache (Enabled for apache2 by maintainer script)
opcache (Enabled for cli by maintainer script)
opcache (Enabled for cgi by maintainer script)
sqlite3 (Enabled for apache2 by maintainer script)
sqlite3 (Enabled for cli by maintainer script)
sqlite3 (Enabled for cgi by maintainer script)
ldap (Enabled for apache2 by maintainer script)
ldap (Enabled for cli by maintainer script)
ldap (Enabled for cgi by maintainer script)

 Configuration files: 
 /etc/php5/mods-available/curl.ini 
extension=curl.so


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 4.0.0-2-686-pae (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages php5-curl depends on:
ii  libc6  2.19-18
ii  libcurl3   7.43.0-1
ii  php5-common [phpapi-20131226]  5.6.9+dfsg-1
ii  ucf3.0030

php5-curl recommends no packages.

php5-curl suggests no packages.

Versions of packages php5-common depends on:
ii  libc6   2.19-18
ii  lsof4.86+dfsg-1
ii  psmisc  22.21-2
ii  sed 4.2.2-6
ii  ucf 3.0030

Versions of packages php5-common suggests:
ii  php5-apcu [php5-user-cache]  4.0.7-1

Versions of packages php5-cli depends on:
ii  libbz2-1.01.0.6-8
ii  libc6 2.19-18
ii  libcomerr21.42.13-1
ii  libdb5.3  5.3.28-9
ii  libedit2  3.1-20150325-1
ii  libgssapi-krb5-2  1.13.2+dfsg-2
ii  libk5crypto3  1.13.2+dfsg-2
ii  libkrb5-3 1.13.2+dfsg-2
ii  libmagic1 1:5.22+15-2
ii  libonig2  5.9.6-1
ii  libpcre3  2:8.35-6
ii  libqdbm14 1.8.78-5+b3
ii  libssl1.0.0   1.0.2c-1
ii  libxml2   2.9.2+dfsg1-3
ii  mime-support  3.58
ii  php5-common   5.6.9+dfsg-1
ii  php5-json 1.3.6-1
ii  tzdata2015e-1
ii  ucf   3.0030
ii  zlib1g1:1.2.8.dfsg-2+b1

Versions of packages php5-cli recommends:
ii  php5-readline  5.6.9+dfsg-1

Versions of packages php5-cli suggests:
ii  php-pear  5.6.9+dfsg-1

Versions of packages libapache2-mod-php5 depends on:
ii  apache2 2.4.12-2
ii  apache2-bin [apache2-api-20120211]  2.4.12-2
ii  libbz2-1.0  1.0.6-8
ii  libc6

Bug#787638: php5-curl: php segfaults immediately with php5-curl installed

2015-06-03 Thread Nick Black
Package: php5-curl
Version: 5.6.9+dfsg-1
Severity: grave
Justification: renders package unusable

Dear Maintainer,

This morning, I upgraded my unstable i386-on-x86_64 installation. This
pulled in new gnutls 3.3.15-5, and also gcc-5-base 5.1.1-9 and python3.4
(i doubt these last two are relevant). Full aptitude logs are below.
Following this upgrade, I started receiving notifications that php jobs
run from cron were failing. Indeed, running the php binary (linked
through alternatives to /usr/bin/php5) segfaulted. I ran an ltrace on
the binary, and determined it was segfaulting while dlopen()ing curl.so
from /usr/lib/php5/20131226/. I removed php5-curl, and the issue went away.

Reinstalling php5-curl reproduces the behavior immediately:

[vps](0) $ php
Segmentation fault
[vps](139) $ ltrace php 21 | tail
strlen(/usr/lib/php5/20131226) = 22
memcpy(0xf505813c, /usr/lib/php5/20131226, 22) = 0xf505813c
__ctype_b_loc()  = 0xf50946ac
memcpy(0xf5058152, /, 1)   = 0xf5058152
__ctype_b_loc()  = 0xf50946ac
strlen(curl.so)= 7
memcpy(0xf5058153, curl.so, 7) = 0xf5058153
dlopen(/usr/lib/php5/20131226/curl.so, 266 no return ...
--- SIGSEGV (Segmentation fault) ---
+++ killed by SIGSEGV +++
[vps](0) $ 

Again, this started following an update that directly affected no php
packages. Here's the aptitude logs:

==
Aptitude 0.6.11: log report
Wed, Jun  3 2015 08:41:06 -0700

IMPORTANT: this log only lists intended actions; actions which fail due to
dpkg problems may not be completed.

Will install 36 packages, and remove 0 packages.
5,082 kB of disk space will be used
===
[INSTALL, DEPENDENCIES] libhogweed4:i386
[UPGRADE] gcc-5-base:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] gnupg-agent:i386 2.0.27-2 - 2.0.28-1
[UPGRADE] gnupg2:i386 2.0.27-2 - 2.0.28-1
[UPGRADE] gnutls-bin:i386 3.3.15-2 - 3.3.15-5
[UPGRADE] lib64atomic1:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] lib64cilkrts5:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] lib64gcc1:i386 1:5.1.1-8 - 1:5.1.1-9
[UPGRADE] lib64gomp1:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] lib64itm1:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] lib64quadmath0:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] lib64stdc++6:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] lib64ubsan0:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libatomic1:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libcilkrts5:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libgcc1:i386 1:5.1.1-8 - 1:5.1.1-9
[UPGRADE] libgfortran3:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libgnutls-deb0-28:i386 3.3.15-2 - 3.3.15-5
[UPGRADE] libgomp1:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libitm1:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libpython3.4-minimal:i386 3.4.3-6 - 3.4.3-7
[UPGRADE] libpython3.4-stdlib:i386 3.4.3-6 - 3.4.3-7
[UPGRADE] libquadmath0:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libstdc++6:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libubsan0:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libx32atomic1:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libx32cilkrts5:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libx32gcc1:i386 1:5.1.1-8 - 1:5.1.1-9
[UPGRADE] libx32gomp1:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libx32itm1:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libx32quadmath0:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libx32stdc++6:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] libx32ubsan0:i386 5.1.1-8 - 5.1.1-9
[UPGRADE] python3.4:i386 3.4.3-6 - 3.4.3-7
[UPGRADE] python3.4-minimal:i386 3.4.3-6 - 3.4.3-7
[UPGRADE] ufraw-batch:i386 0.20-2 - 0.20-3
===

Log complete.
==

Note the upgrade of various core libraries, though not libc6. I am using
libcurl3-gnutls (as opposed to libcurl3-openssl), and figure the
libgnutls update might have broken things here.


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: i386 (x86_64)

Kernel: Linux 3.18.5-x86_64-linode52 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages php5-curl depends on:
ii  dpkg   1.18.1
ii  libc6  2.19-18
ii  libcurl3   7.42.1-2
ii  php5-common [phpapi-20131226]  5.6.9+dfsg-1
ii  ucf3.0030

php5-curl recommends no packages.

php5-curl suggests no packages.


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org