Re: [PHP-DEV] Bug #14546: Segmentation fault in httpd child process when using user authentication

[Andrew Sitnikov]

Hello ,

I have similar problem with this code on Apache1.3.22+php4.1.0 linux
2.4.16 RH6.2.  I think this is critical problem.

I configure PHP with:

CC=gcc2.95.3 \
CXX=gcc2.95.3 \
./configure \
--prefix=/usr/local/php \
--with-apxs=/usr/local/httpd/bin/apxs \
--with-config-file-path=/usr/local/php/etc \
--enable-track-vars \
--enable-magic-quotes \
--enable-safe-mode \
--enable-memory-limit \
--enable-sysvshm \
--enable-sysvsem \
--enable-shmop \
--enable-sockets \
--enable-wddx \
--enable-xslt \
--enable-ctype \
--enable-bcmath \
--enable-mailparse \
--enable-ftp \
--with-gd=/export/work/gd-1.8.4-gif \
--with-jpeg-dir=/export/work/jpeg-6b \
--with-png-dir=/export/work/libpng-1.0.9 \
--with-ttf=/export/work/freetype-1.3.1 \
--with-mysql=/usr/local/mysql \
--with-openssl=/usr/local/ssl \
--with-epipe \
--with-mcrypt \
--with-mhash \
--with-zlib \
--with-mm \
--with-xmlrpc \
--with-iconv \
--with-curl \
--with-bz2 \
--with-gmp  \
--with-ldap \
--with-xml  \
--with-zip  \
--with-gettext \
--with-dom \
--with-xslt-sablot \
"$@"

aucu> I am using Apache 1.3.22 and PHP 4.1.0 on RedHat Linux 7.0.
aucu> When I view the following script, or any similar scripts with user
aucu> authentication features, the page comes up as "can't be displayed", a look
aucu> in the error_log shows the error "child pid 25693 exit signal Segmentation
aucu> fault (11)" (obviously a different pid each time).

aucu> The script is:
aucu>if(!isset($PHP_AUTH_USER)) {
aucu> header("WWW-Authenticate: Basic realm=\"My Realm\"");
aucu> header("HTTP/1.0 401 Unauthorized");
aucu> echo "Text to send if user hits Cancel button\n";
aucu> exit;
aucu>   } else {
aucu> echo "Hello $PHP_AUTH_USER.";
aucu> echo "You entered $PHP_AUTH_PW as your password.";
aucu>   }
?>>

aucu> My PHP configure line was:
aucu> ./configure --prefix=/opt/server/php --with-mysql=/opt/server/mysql
aucu> --enable-ftp --enable-safe-mode --enable-track-vars
aucu> --with-apache=../apache_1.3.22

aucu> My Apache configure line was:
aucu> ./configure --prefix=/opt/server/httpd
aucu> --activate-module=src/modules/php4/libphp4.a
aucu> --activate-module=src/modules/perl/libperl.a

aucu> GDB Backtrace:
aucu> Program received signal SIGSEGV, Segmentation fault.
aucu> 0x80f99ee in _efree ()
aucu> (gdb) bt
aucu> #0  0x80f99ee in _efree ()
aucu> #1  0x80934e3 in sapi_add_header_ex ()
aucu> #2  0x80bedd0 in zif_header ()
aucu> #3  0x811fbff in execute ()
aucu> #4  0x8106179 in zend_execute_scripts ()
aucu> #5  0x8091395 in php_execute_script ()
aucu> #6  0x810e2a2 in apache_php_module_main ()
aucu> #7  0x808e91e in php_restore_umask ()
aucu> #8  0x808e979 in php_restore_umask ()
aucu> #9  0x8145059 in ap_invoke_handler ()
aucu> #10 0x8159ce7 in ap_some_auth_required ()
aucu> #11 0x8159d48 in ap_process_request ()
aucu> #12 0x8150e69 in ap_child_terminate ()
aucu> #13 0x8151014 in ap_child_terminate ()
aucu> #14 0x8151184 in ap_child_terminate ()
aucu> #15 0x81517fd in ap_child_terminate ()
aucu> #16 0x815207b in main ()
aucu> #17 0x400d4790 in __libc_start_main (main=0x8151cd4 , argc=2,
aucu> ubp_av=0xbaf4,
aucu> init=0x8074e90 <_init>, fini=0x820675c <_fini>, rtld_fini=0x4000d35c
aucu> <_dl_fini>,
aucu> stack_end=0xbaec) at ../sysdeps/generic/libc-start.c:111



Best regards,
 Andrew Sitnikov 
 e-mail : [EMAIL PROTECTED]
 GSM: (+372) 56491109


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Bug #14546: Segmentation fault in httpd child process when using user authentication

[assassin]

From: [EMAIL PROTECTED]
Operating system: RedHat Linux 7.0
PHP version:  4.1.0
PHP Bug Type: Reproducible crash
Bug description:  Segmentation fault in httpd child process when using user 
authentication

I am using Apache 1.3.22 and PHP 4.1.0 on RedHat Linux 7.0.

When I view the following script, or any similar scripts with user
authentication features, the page comes up as "can't be displayed", a look
in the error_log shows the error "child pid 25693 exit signal Segmentation
fault (11)" (obviously a different pid each time).

The script is:
Hello $PHP_AUTH_USER.";
echo "You entered $PHP_AUTH_PW as your password.";
  }
?>

My PHP configure line was:
./configure --prefix=/opt/server/php --with-mysql=/opt/server/mysql
--enable-ftp --enable-safe-mode --enable-track-vars
--with-apache=../apache_1.3.22

My Apache configure line was:
./configure --prefix=/opt/server/httpd
--activate-module=src/modules/php4/libphp4.a
--activate-module=src/modules/perl/libperl.a

GDB Backtrace:
Program received signal SIGSEGV, Segmentation fault.
0x80f99ee in _efree ()
(gdb) bt
#0  0x80f99ee in _efree ()
#1  0x80934e3 in sapi_add_header_ex ()
#2  0x80bedd0 in zif_header ()
#3  0x811fbff in execute ()
#4  0x8106179 in zend_execute_scripts ()
#5  0x8091395 in php_execute_script ()
#6  0x810e2a2 in apache_php_module_main ()
#7  0x808e91e in php_restore_umask ()
#8  0x808e979 in php_restore_umask ()
#9  0x8145059 in ap_invoke_handler ()
#10 0x8159ce7 in ap_some_auth_required ()
#11 0x8159d48 in ap_process_request ()
#12 0x8150e69 in ap_child_terminate ()
#13 0x8151014 in ap_child_terminate ()
#14 0x8151184 in ap_child_terminate ()
#15 0x81517fd in ap_child_terminate ()
#16 0x815207b in main ()
#17 0x400d4790 in __libc_start_main (main=0x8151cd4 , argc=2,
ubp_av=0xbaf4,
init=0x8074e90 <_init>, fini=0x820675c <_fini>, rtld_fini=0x4000d35c
<_dl_fini>,
stack_end=0xbaec) at ../sysdeps/generic/libc-start.c:111
-- 
Edit bug report at: http://bugs.php.net/?id=14546&edit=1


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]