Bug #54488 [Fbk-Asn]: SIGSEGV in zend_assign_to_variable

2011-07-06 Thread dbetz at df dot eu
Edit report at https://bugs.php.net/bug.php?id=54488edit=1

 ID: 54488
 User updated by:dbetz at df dot eu
 Reported by:dbetz at df dot eu
 Summary:SIGSEGV in zend_assign_to_variable
-Status: Feedback
+Status: Assigned
 Type:   Bug
 Package:FPM related
 Operating System:   Gentoo
 PHP Version:5.3.6
 Assigned To:fat
 Block user comment: N
 Private report: N

 New Comment:

Hello,

no problem. :-)

The apache config is a little bit difficult, so i only paste the relevant 
things:

  LoadModule fastcgi_module mod_fastcgi.so
  LoadModule ldap_modulemod_ldap.so
  LoadModule vhost_ldap_module  mod_vhost_ldap.so

  LDAPSharedCacheSize 200
  LDAPCacheEntries 4096
  LDAPCacheTTL 5
  LDAPOpCacheEntries 4096
  LDAPOpCacheTTL 5

  FastCgiExternalServer /etc/httpd/fastcgi/php-fcgi-starter -socket 
/etc/httpd/fastcgi/php5-53LATEST
  Action php-fastcgi /php/php-fcgi-starter

VirtualHost _default_:80
  ServerName domainname.de
  SuexecUserGroup apache nobody
  DocumentRoot /kunden/shadow/htdocs/

  ScriptAlias /php/ /etc/httpd/fastcgi/

  VhostLDAPEnabled on
  VhostLDAPUrl ldap://localhost/cn=bla,sec=hosting,o=domain,c=de;
  VhostLdapBindDN cn=username,cn=bla,sec=hosting,o=domain,c=de
  VhostLDAPBindPassword noone
/Virtualhost

FPM Config:

;
; FPM Configuration ;
;

; All relative paths in this configuration file are relative to PHP's install
; prefix.

; Include one or more files. If glob(3) exists, it is used to include a bunch of
; files from a glob(3) pattern. This directive can be used everywhere in the
; file.
include=/usr/local/etc/fpm.d/5-53LATEST-*.conf

;;
; Global Options ;
;;

[global]

pid = /var/run/php5-53LATEST.pid

; Error log file
; Note: the default prefix is /usr/local/var
; Default Value: log/php-fpm.log
error_log = /var/log/php-fpm.log

; Log level
; Possible Values: alert, error, warning, notice, debug
; Default Value: notice
log_level = warning

; If this number of child processes exit with SIGSEGV or SIGBUS within the time
; interval set by emergency_restart_interval then FPM will restart. A value
; of '0' means 'Off'.
; Default Value: 0
emergency_restart_threshold = 10

[default]

listen = /etc/httpd/fastcgi/5-53LATEST
user = root
group = nobody

pm = dynamic
pm.max_children = 1000
pm.start_servers = 1
pm.min_spare_servers = 1
pm.max_spare_servers = 1
pm.max_requests = 1000

; PHP.ini Settings:

php_flag[track_errors] = Off
php_flag[allow_url_fopen] = On
php_flag[sql.safe_mode] = Off
..
tons of php_(admin)_flags



phpinfo() can be found at http://imageupgrade2.domainfactory-kunde.de/info.php

Thanks for your help


Previous Comments:

[2011-07-06 06:18:44] f...@php.net

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to Open.

Thank you for your interest in PHP.


I'm sorry to bother you again. Can you please give us the apache configuration 
and 
a phpinfo() output ?

thx


[2011-07-06 01:58:43] dbetz at df dot eu

Oh sorry,

here the configure options:

./configure --with-mysql=/usr/local/mysql \
--enable-debug \
--with-mysqli \
--with-config-file-path=/usr/local/php53-fpm \
--with-openssl \
--with-gd \
--with-t1lib \
--enable-ftp \
--enable-calendar \
--with-libxml-dir \
--with-jpeg-dir=../jpeg-6b/ \
--with-freetype-dir=/usr/lib \
--with-gettext \
--with-zlib-dir=../zlib-1.1.3/ \
--with-png-dir=../libpng-1.0.6/ \
--with-gdbm \
--with-ndbm \
--enable-dba \
--with-imap=/usr/local/imap-2007e \
--with-imap-ssl=/usr/local/imap-2007e \
--enable-wddx \
--enable-bcmath \
--enable-exif \
--with-curl \
--enable-inline-optimization \
--with-gnu-ld \
--with-zlib \
--with-mcrypt \
--enable-wddx \
--with-mhash \
--with-pgsql \
--enable-sockets \
--with-tidy \
--with-xmlrpc \
--enable-zip \
--with-bz2 \
--with-pdo-mysql=/usr \
--with-iconv \
--enable-soap \
--with-ldap \
--with-xsl \
--with-t1lib \
--enable-fpm \
--enable-mbstring


[2011-07-05 17:24:59] f...@php.net

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to Open.

Thank you for your interest in PHP.


can you please provide the configure options you used to compile PHP please ?

thx
++ jerome


[2011-07-04 02:20:26] dbetz at df dot eu

Hello,

the problem ist only in FPM. Running 

Bug #54488 [Fbk-Asn]: SIGSEGV in zend_assign_to_variable

2011-07-06 Thread dbetz at df dot eu
Edit report at https://bugs.php.net/bug.php?id=54488edit=1

 ID: 54488
 User updated by:dbetz at df dot eu
 Reported by:dbetz at df dot eu
 Summary:SIGSEGV in zend_assign_to_variable
-Status: Feedback
+Status: Assigned
 Type:   Bug
 Package:FPM related
 Operating System:   Gentoo
 PHP Version:5.3.6
 Assigned To:fat
 Block user comment: N
 Private report: N

 New Comment:

Oh sorry, my failure.

Now its 5.3.6 and the problem still exists with that version.

Greetings,
Daniel


Previous Comments:

[2011-07-06 08:32:58] f...@php.net

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to Open.

Thank you for your interest in PHP.


you are reporting using 5.3.6 but on the phpinfo() page you provide us it's 
5.3.5.

Is it possible for you to test using the last snapshot of 5.3 please ?

thx
++ jerome


[2011-07-06 07:29:49] dbetz at df dot eu

Hello,

no problem. :-)

The apache config is a little bit difficult, so i only paste the relevant 
things:

  LoadModule fastcgi_module mod_fastcgi.so
  LoadModule ldap_modulemod_ldap.so
  LoadModule vhost_ldap_module  mod_vhost_ldap.so

  LDAPSharedCacheSize 200
  LDAPCacheEntries 4096
  LDAPCacheTTL 5
  LDAPOpCacheEntries 4096
  LDAPOpCacheTTL 5

  FastCgiExternalServer /etc/httpd/fastcgi/php-fcgi-starter -socket 
/etc/httpd/fastcgi/php5-53LATEST
  Action php-fastcgi /php/php-fcgi-starter

VirtualHost _default_:80
  ServerName domainname.de
  SuexecUserGroup apache nobody
  DocumentRoot /kunden/shadow/htdocs/

  ScriptAlias /php/ /etc/httpd/fastcgi/

  VhostLDAPEnabled on
  VhostLDAPUrl ldap://localhost/cn=bla,sec=hosting,o=domain,c=de;
  VhostLdapBindDN cn=username,cn=bla,sec=hosting,o=domain,c=de
  VhostLDAPBindPassword noone
/Virtualhost

FPM Config:

;
; FPM Configuration ;
;

; All relative paths in this configuration file are relative to PHP's install
; prefix.

; Include one or more files. If glob(3) exists, it is used to include a bunch of
; files from a glob(3) pattern. This directive can be used everywhere in the
; file.
include=/usr/local/etc/fpm.d/5-53LATEST-*.conf

;;
; Global Options ;
;;

[global]

pid = /var/run/php5-53LATEST.pid

; Error log file
; Note: the default prefix is /usr/local/var
; Default Value: log/php-fpm.log
error_log = /var/log/php-fpm.log

; Log level
; Possible Values: alert, error, warning, notice, debug
; Default Value: notice
log_level = warning

; If this number of child processes exit with SIGSEGV or SIGBUS within the time
; interval set by emergency_restart_interval then FPM will restart. A value
; of '0' means 'Off'.
; Default Value: 0
emergency_restart_threshold = 10

[default]

listen = /etc/httpd/fastcgi/5-53LATEST
user = root
group = nobody

pm = dynamic
pm.max_children = 1000
pm.start_servers = 1
pm.min_spare_servers = 1
pm.max_spare_servers = 1
pm.max_requests = 1000

; PHP.ini Settings:

php_flag[track_errors] = Off
php_flag[allow_url_fopen] = On
php_flag[sql.safe_mode] = Off
..
tons of php_(admin)_flags



phpinfo() can be found at http://imageupgrade2.domainfactory-kunde.de/info.php

Thanks for your help


[2011-07-06 06:18:44] f...@php.net

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to Open.

Thank you for your interest in PHP.


I'm sorry to bother you again. Can you please give us the apache configuration 
and 
a phpinfo() output ?

thx


[2011-07-06 01:58:43] dbetz at df dot eu

Oh sorry,

here the configure options:

./configure --with-mysql=/usr/local/mysql \
--enable-debug \
--with-mysqli \
--with-config-file-path=/usr/local/php53-fpm \
--with-openssl \
--with-gd \
--with-t1lib \
--enable-ftp \
--enable-calendar \
--with-libxml-dir \
--with-jpeg-dir=../jpeg-6b/ \
--with-freetype-dir=/usr/lib \
--with-gettext \
--with-zlib-dir=../zlib-1.1.3/ \
--with-png-dir=../libpng-1.0.6/ \
--with-gdbm \
--with-ndbm \
--enable-dba \
--with-imap=/usr/local/imap-2007e \
--with-imap-ssl=/usr/local/imap-2007e \
--enable-wddx \
--enable-bcmath \
--enable-exif \
--with-curl \
--enable-inline-optimization \
--with-gnu-ld \
--with-zlib \
--with-mcrypt \
--enable-wddx \
--with-mhash \
--with-pgsql \
--enable-sockets \
--with-tidy \
--with-xmlrpc \
--enable-zip \
--with-bz2 

Bug #54488 [Fbk-Asn]: SIGSEGV in zend_assign_to_variable

2011-07-05 Thread dbetz at df dot eu
Edit report at https://bugs.php.net/bug.php?id=54488edit=1

 ID: 54488
 User updated by:dbetz at df dot eu
 Reported by:dbetz at df dot eu
 Summary:SIGSEGV in zend_assign_to_variable
-Status: Feedback
+Status: Assigned
 Type:   Bug
 Package:FPM related
 Operating System:   Gentoo
 PHP Version:5.3.6
 Assigned To:fat
 Block user comment: N
 Private report: N

 New Comment:

Oh sorry,

here the configure options:

./configure --with-mysql=/usr/local/mysql \
--enable-debug \
--with-mysqli \
--with-config-file-path=/usr/local/php53-fpm \
--with-openssl \
--with-gd \
--with-t1lib \
--enable-ftp \
--enable-calendar \
--with-libxml-dir \
--with-jpeg-dir=../jpeg-6b/ \
--with-freetype-dir=/usr/lib \
--with-gettext \
--with-zlib-dir=../zlib-1.1.3/ \
--with-png-dir=../libpng-1.0.6/ \
--with-gdbm \
--with-ndbm \
--enable-dba \
--with-imap=/usr/local/imap-2007e \
--with-imap-ssl=/usr/local/imap-2007e \
--enable-wddx \
--enable-bcmath \
--enable-exif \
--with-curl \
--enable-inline-optimization \
--with-gnu-ld \
--with-zlib \
--with-mcrypt \
--enable-wddx \
--with-mhash \
--with-pgsql \
--enable-sockets \
--with-tidy \
--with-xmlrpc \
--enable-zip \
--with-bz2 \
--with-pdo-mysql=/usr \
--with-iconv \
--enable-soap \
--with-ldap \
--with-xsl \
--with-t1lib \
--enable-fpm \
--enable-mbstring


Previous Comments:

[2011-07-05 17:24:59] f...@php.net

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to Open.

Thank you for your interest in PHP.


can you please provide the configure options you used to compile PHP please ?

thx
++ jerome


[2011-07-04 02:20:26] dbetz at df dot eu

Hello,

the problem ist only in FPM. Running php-cgi works for me.

Thx and greetings


[2011-07-02 12:49:05] f...@php.net

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to Open.

Thank you for your interest in PHP.


Is it possible for you to test without FPM (with php-cgi or mod_php for apache) 
please ?

I'd like to first ensure the bug is exclusively related to FPM.

thx


[2011-04-15 10:36:04] dbetz at df dot eu

Hello,

here are some more infos

it seems **variable_ptr_ptr is empty

(gdb) print variable_ptr_ptr
$6 = (zval **) 0x9289bb4
(gdb) print *variable_ptr_ptr
$7 = (zval *) 0x5a5a5a5a
(gdb) print **variable_ptr_ptr
Cannot access memory at address 0x5a5a5a5a


(gdb) print opline
$1 = (zend_op *) 0x926d958
(gdb) print *opline
$2 = {handler = 0x865abb8 ZEND_ASSIGN_SPEC_CV_VAR_HANDLER, result = {op_type 
= 4, u = {constant = {value = {lval = 660,
  dval = 3.2608332625522272e-321, str = {val = 0x294 Address 0x294 out 
of bounds, len = 0}, ht = 0x294, obj = {handle = 660, handlers = 0x0}},
refcount__gc = 0, type = 0 '\000', is_ref__gc = 0 '\000'}, var = 660, 
opline_num = 660, op_array = 0x294, jmp_addr = 0x294, EA = {var = 660,
type = 0}}}, op1 = {op_type = 16, u = {constant = {value = {lval = 0, 
dval = 3.3951932655444357e-313, str = {val = 0x0, len = 16}, ht = 0x0,
  obj = {handle = 0, handlers = 0x10}}, refcount__gc = 1, type = 6 
'\006', is_ref__gc = 0 '\000'}, var = 0, opline_num = 0, op_array = 0x0,
  jmp_addr = 0x0, EA = {var = 0, type = 16}}}, op2 = {op_type = 4, u = 
{constant = {value = {lval = 640, dval = 1.6975966643924192e-313, str = {
val = 0x280 Address 0x280 out of bounds, len = 8}, ht = 0x280, 
obj = {handle = 640, handlers = 0x8}}, refcount__gc = 0, type = 0 '\000',
is_ref__gc = 0 '\000'}, var = 640, opline_num = 640, op_array = 0x280, 
jmp_addr = 0x280, EA = {var = 640, type = 8}}}, extended_value = 0,
  lineno = 403, opcode = 38 ''}
(gdb) print opline-op2
$3 = {op_type = 4, u = {constant = {value = {lval = 640, dval = 
1.6975966643924192e-313, str = {val = 0x280 Address 0x280 out of bounds, len 
= 8},
ht = 0x280, obj = {handle = 640, handlers = 0x8}}, refcount__gc = 0, 
type = 0 '\000', is_ref__gc = 0 '\000'}, var = 640, opline_num = 640,
op_array = 0x280, jmp_addr = 0x280, EA = {var = 640, type = 8}}}
(gdb) print opline-op1
$8 = (struct _znode *) 0x926d970
(gdb) print opline-op1
$9 = {op_type = 16, u = {constant = {value = {lval = 0, dval = 
3.3951932655444357e-313, str = {val = 0x0, len = 16}, ht = 0x0, obj = {handle = 
0,
  handlers = 0x10}}, refcount__gc = 1, type = 6 

Bug #54488 [Fbk-Asn]: SIGSEGV in zend_assign_to_variable

2011-07-04 Thread dbetz at df dot eu
Edit report at https://bugs.php.net/bug.php?id=54488edit=1

 ID: 54488
 User updated by:dbetz at df dot eu
 Reported by:dbetz at df dot eu
 Summary:SIGSEGV in zend_assign_to_variable
-Status: Feedback
+Status: Assigned
 Type:   Bug
 Package:FPM related
 Operating System:   Gentoo
 PHP Version:5.3.6
 Assigned To:fat
 Block user comment: N
 Private report: N

 New Comment:

Hello,

the problem ist only in FPM. Running php-cgi works for me.

Thx and greetings


Previous Comments:

[2011-07-02 12:49:05] f...@php.net

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to Open.

Thank you for your interest in PHP.


Is it possible for you to test without FPM (with php-cgi or mod_php for apache) 
please ?

I'd like to first ensure the bug is exclusively related to FPM.

thx


[2011-04-15 10:36:04] dbetz at df dot eu

Hello,

here are some more infos

it seems **variable_ptr_ptr is empty

(gdb) print variable_ptr_ptr
$6 = (zval **) 0x9289bb4
(gdb) print *variable_ptr_ptr
$7 = (zval *) 0x5a5a5a5a
(gdb) print **variable_ptr_ptr
Cannot access memory at address 0x5a5a5a5a


(gdb) print opline
$1 = (zend_op *) 0x926d958
(gdb) print *opline
$2 = {handler = 0x865abb8 ZEND_ASSIGN_SPEC_CV_VAR_HANDLER, result = {op_type 
= 4, u = {constant = {value = {lval = 660,
  dval = 3.2608332625522272e-321, str = {val = 0x294 Address 0x294 out 
of bounds, len = 0}, ht = 0x294, obj = {handle = 660, handlers = 0x0}},
refcount__gc = 0, type = 0 '\000', is_ref__gc = 0 '\000'}, var = 660, 
opline_num = 660, op_array = 0x294, jmp_addr = 0x294, EA = {var = 660,
type = 0}}}, op1 = {op_type = 16, u = {constant = {value = {lval = 0, 
dval = 3.3951932655444357e-313, str = {val = 0x0, len = 16}, ht = 0x0,
  obj = {handle = 0, handlers = 0x10}}, refcount__gc = 1, type = 6 
'\006', is_ref__gc = 0 '\000'}, var = 0, opline_num = 0, op_array = 0x0,
  jmp_addr = 0x0, EA = {var = 0, type = 16}}}, op2 = {op_type = 4, u = 
{constant = {value = {lval = 640, dval = 1.6975966643924192e-313, str = {
val = 0x280 Address 0x280 out of bounds, len = 8}, ht = 0x280, 
obj = {handle = 640, handlers = 0x8}}, refcount__gc = 0, type = 0 '\000',
is_ref__gc = 0 '\000'}, var = 640, opline_num = 640, op_array = 0x280, 
jmp_addr = 0x280, EA = {var = 640, type = 8}}}, extended_value = 0,
  lineno = 403, opcode = 38 ''}
(gdb) print opline-op2
$3 = {op_type = 4, u = {constant = {value = {lval = 640, dval = 
1.6975966643924192e-313, str = {val = 0x280 Address 0x280 out of bounds, len 
= 8},
ht = 0x280, obj = {handle = 640, handlers = 0x8}}, refcount__gc = 0, 
type = 0 '\000', is_ref__gc = 0 '\000'}, var = 640, opline_num = 640,
op_array = 0x280, jmp_addr = 0x280, EA = {var = 640, type = 8}}}
(gdb) print opline-op1
$8 = (struct _znode *) 0x926d970
(gdb) print opline-op1
$9 = {op_type = 16, u = {constant = {value = {lval = 0, dval = 
3.3951932655444357e-313, str = {val = 0x0, len = 16}, ht = 0x0, obj = {handle = 
0,
  handlers = 0x10}}, refcount__gc = 1, type = 6 '\006', is_ref__gc = 0 
'\000'}, var = 0, opline_num = 0, op_array = 0x0, jmp_addr = 0x0, EA = {
  var = 0, type = 16}}}
(gdb) print (opline-op1)-u.var
$13 = 0
(gdb) print (opline-op1)-u
$14 = {constant = {value = {lval = 0, dval = 3.3951932655444357e-313, str = 
{val = 0x0, len = 16}, ht = 0x0, obj = {handle = 0, handlers = 0x10}},
refcount__gc = 1, type = 6 '\006', is_ref__gc = 0 '\000'}, var = 0, 
opline_num = 0, op_array = 0x0, jmp_addr = 0x0, EA = {var = 0, type = 16}}


[2011-04-07 16:30:05] dbetz at df dot eu

here the php-fpm.conf:

[global]

pid = /var/run/php5-53LATEST.pid
error_log = /var/log/php-fpm.log
log_level = debug
emergency_restart_threshold = 10

[default]

listen = localhost:9000
user = nobody
group = apache

pm = dynamic
pm.max_children = 1000
pm.start_servers = 1
pm.min_spare_servers = 1
pm.max_spare_servers = 1
pm.max_requests = 1000
pm.status_path = /status


[domain.com]

listen = /etc/httpd/fastcgi/domain.com
user = u27
group = nobody

pm = dynamic
pm.max_children = 1000
pm.start_servers = 1
pm.min_spare_servers = 1
pm.max_spare_servers = 1
pm.max_requests = 1000


[2011-04-07 16:26:51] dbetz at df dot eu

Configure Command =  './configure'  '--with-mysql=/usr/local/mysql' 
'--enable-debug' '--with-mysqli' '--with-config-file-path=/usr/local/php53-fpm' 
'--with-openssl' '--with-gd' '--with-t1lib' '--enable-ftp'