[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-06-12 Thread Athos Ribeiro
This was released in mantic by the security team as well. Tagging as
such

** Changed in: php8.2 (Ubuntu Mantic)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-05-02 Thread Launchpad Bug Tracker
This bug was fixed in the package php8.1 - 8.1.2-1ubuntu2.17

---
php8.1 (8.1.2-1ubuntu2.17) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap buffer-overflow
- debian/patches/CVE-2022-4900.patch: prevent potential buffer
  overflow for large valye of php_cli_server_workers_max in
  sapi/cli/php_cli_server.c.
- CVE-2022-4900
  * SECURITY UPDATE: Cookie by pass
- debian/patches/CVE-2024-2756.patch: adds more mangling rules
  in main/php_variable.c.
- CVE-2024-2756
  * SECURITY UPDATE: Account take over risk
- debian/patches/CVE-2024-3096.patch: disallow null character in bcrypt
  password in ext/standard/password.c,
  ext/standard/tests/password_bcrypt_errors.phpt.
- CVE-2024-3096

 -- Leonidas Da Silva Barbosa   Wed, 01 May
2024 07:10:07 -0300

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-26 Thread Timo Aaltonen
Hello Lars-Göran, or anyone else affected,

Accepted php7.4 into focal-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/php7.4/7.4.3-4ubuntu2.21 in a few
hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, what testing has been
performed on the package and change the tag from verification-needed-
focal to verification-done-focal. If it does not fix the bug for you,
please add a comment stating that, and change the tag to verification-
failed-focal. In either case, without details of your testing we will
not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Changed in: php7.4 (Ubuntu Focal)
   Status: In Progress => Fix Committed

** Tags added: verification-needed-focal

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-26 Thread Timo Aaltonen
Hello Lars-Göran, or anyone else affected,

Accepted php8.1 into jammy-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/php8.1/8.1.2-1ubuntu2.16 in a few
hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, what testing has been
performed on the package and change the tag from verification-needed-
jammy to verification-done-jammy. If it does not fix the bug for you,
please add a comment stating that, and change the tag to verification-
failed-jammy. In either case, without details of your testing we will
not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Changed in: php8.1 (Ubuntu Jammy)
   Status: In Progress => Fix Committed

** Tags added: verification-needed-jammy

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-22 Thread Athos Ribeiro
** Tags removed: verification-done-mantic
** Tags added: verification-needed-mantic

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-18 Thread Andreas Hasenack
So what are you saying, that phpinfo() is causing random segfaults? So
you have a run with just phpinfo() with the php8.2 packages from release
and proposed?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-16 Thread Athos Ribeiro
By removing the call to phpinfo(), I could get back to zero errors with
the package in -proposed (and a few thousand with the package in the
release pocket), meaning the observed noise was indeed unrelated to this
bug/fix.

This is ApacheBench, Version 2.3 <$Revision: 1903618 $> 
  
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/

Benchmarking localhost (be patient)
Completed 1000 requests
Completed 2000 requests
Completed 3000 requests
Completed 4000 requests
Completed 5000 requests
Completed 6000 requests
Completed 7000 requests
Completed 8000 requests
Completed 9000 requests
Completed 1 requests
Finished 1 requests


Server Software:Apache/2.4.57
Server Hostname:localhost
Server Port:80

Document Path:  /test.php
Document Length:0 bytes

Concurrency Level:  99
Time taken for tests:   0.728 seconds
Complete requests:  1
Failed requests:0
Total transferred:  166 bytes
HTML transferred:   0 bytes
Requests per second:13729.85 [#/sec] (mean)
Time per request:   7.211 [ms] (mean)
Time per request:   0.073 [ms] (mean, across all concurrent requests)
Transfer rate:  2225.74 [Kbytes/sec] received

Connection Times (ms)
  min  mean[+/-sd] median   max
Connect:00   0.3  0   3
Processing: 27   4.5  6  57
Waiting:27   4.5  6  57
Total:  57   4.5  6  59

Percentage of the requests served within a certain time (ms)
  50%  6
  66%  7
  75%  7
  80%  7
  90%  8
  95%  9
  98% 10
  99% 12
 100% 59 (longest request)
Number of SIGSEGV failures:
0

** Tags removed: verification-needed-mantic
** Tags added: verification-done-mantic

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-16 Thread Athos Ribeiro
** Changed in: php8.1 (Ubuntu Jammy)
   Status: Triaged => In Progress

** Changed in: php7.4 (Ubuntu Focal)
   Status: Triaged => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-11 Thread Athos Ribeiro
Reproducing the issue in mantic with the script provided in the SRU test
plan:

+ echo 'Number of SIGSEGV failures:'
Number of SIGSEGV failures:
+ lxc exec php-fpm-segfault -- sh -c 'cat /var/log/php8.2-fpm.log | grep -c 
SIGSEGV'
5102

Which confirms the issue.

When tryong to verify the fix, I got the following result:

+ echo 'Number of SIGSEGV failures:'
Number of SIGSEGV failures:
+ lxc exec php-fpm-segfault -- sh -c 'cat /var/log/php8.2-fpm.log | grep -c 
SIGSEGV'
315

Further runs with and without the fix are quite consistent: I get
thousands of failures for the package in the release pocket, and a few
hundreds with the package in proposed.

Before marking this as a verification failure, I would like to dig a bit
more to ensure this is not a different bug or a a issue with local
resources.

This is the modified test plan script used to install the packages from
the proposed pocket:

#!/bin/bash

set -eux

trap cleanup EXIT

UBUNTU_SERIES=${UBUNTU_SERIES:-mantic}
PHP_VERSION=${PHP_VERSION:-8.2}
TEST_CONTAINER=php-fpm-segfault
PHP_TEST_FILE=$(mktemp)
PROPOSED_REPO_FILE=$(mktemp)
PROPOSED_PREF=$(mktemp)

cleanup() {
  rm -f ${PHP_TEST_FILE}
  rm -f ${PROPOSED_REPO_FILE}
  rm -f ${PROPOSED_PREF}
  lxc delete -f ${TEST_CONTAINER}
}

cat > ${PHP_TEST_FILE} <
 ${PROPOSED_REPO_FILE}  ${PROPOSED_PREF} 

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-11 Thread Athos Ribeiro
** Description changed:

  [ Impact ]
  
  Running fpm_get_status may result in a segmentation fault.
  
  [ Test Plan ]
  
  The following script is a reproducer for the described bug:
  
  #!/bin/bash
  
  set -eux
  
  trap cleanup EXIT
  
- UBUNTU_SERIES=${UBUNTU_SERIIES:-mantic}
+ UBUNTU_SERIES=${UBUNTU_SERIES:-mantic}
  PHP_VERSION=${PHP_VERSION:-8.2}
  TEST_CONTAINER=php-fpm-segfault
  PHP_TEST_FILE=$(mktemp)
  
  cleanup() {
-   rm -f ${PHP_TEST_FILE}
-   lxc delete -f ${TEST_CONTAINER}
+   rm -f ${PHP_TEST_FILE}
+   lxc delete -f ${TEST_CONTAINER}
  }
  
  cat > ${PHP_TEST_FILE} <
  http://localhost/test.php
  echo 'Number of SIGSEGV failures:'
  lxc exec ${TEST_CONTAINER} -- sh -c "cat /var/log/php8.2-fpm.log | grep -c 
SIGSEGV"
  
- 
- Running the script above ensuring the php packages from proposed are 
installed should be enough for SRU verification purposes.
+ Running the script above ensuring the php packages from proposed are
+ installed should be enough for SRU verification purposes.
  
  [ Where problems could occur ]
  
  The change in question is straightforward:
  
  We are replacing a string interpolation for a string literal because the
  variables being substituted could result in a null pointer dereference.
  
  Unless some other software components are parsing the logs, which are
  being changed (which would result in chained failures across
  components), issues could occur due to unrelated issues with possible
  new dependencies after a full PHP rebuild.
  
  [ Other Info ]
  
  This is fixed upstream in php-8.3.1, php-8.2.14, and php-8.1.27. Hence,
  this should be fixed in noble, but needs fixing in mantic, jammy, and
  focal.
  
  [ Original report ]
  
  Like the title says, we do run fpm_get_status a lot. We're trying to get
  metrics about our systems performance this way.
  
  lsb_release -rd:
  Description:  Ubuntu 20.04.6 LTS
  Release:  20.04
  
  apt-cache policy php-fpm
  php-fpm:
    Installed: 2:7.4+75
    Candidate: 2:7.4+75
    Version table:
   *** 2:7.4+75 500
  500 http://fi.archive.ubuntu.com/ubuntu focal/universe amd64 Packages
  100 /var/lib/dpkg/status
  
  I expected it to return fpm status, instead it crashes and kills the
  process.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-11 Thread Athos Ribeiro
FWIW, the regression tests were flaky or unrelated (re-trigger or
migration-reference/0 got things passing again).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-11 Thread Athos Ribeiro
Thank you, Lars!

I am about to prepare the SRUs for jammy and focal (the mantic one is
already in proposed). Are you referring to the package in mantic-
proposed (with the fix) or the package without the fix? i.e., is this
relevant for the SRU verification?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-11 Thread Lars-Göran Karlstedt
Hi guys, thanks for pushing this forward. I've found another issue
related to this but I'm still investigating so not sure yet what to make
of it.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-10 Thread Launchpad Bug Tracker
** Merge proposal linked:
   
https://code.launchpad.net/~athos-ribeiro/ubuntu/+source/php7.4/+git/php7.4/+merge/464010

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-10 Thread Launchpad Bug Tracker
** Merge proposal linked:
   
https://code.launchpad.net/~athos-ribeiro/ubuntu/+source/php8.1/+git/php8.1/+merge/464008

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-04-05 Thread Timo Aaltonen
Hello Lars-Göran, or anyone else affected,

Accepted php8.2 into mantic-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/php8.2/8.2.10-2ubuntu2
in a few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, what testing has been
performed on the package and change the tag from verification-needed-
mantic to verification-done-mantic. If it does not fix the bug for you,
please add a comment stating that, and change the tag to verification-
failed-mantic. In either case, without details of your testing we will
not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Changed in: php8.2 (Ubuntu Mantic)
   Status: In Progress => Fix Committed

** Tags added: verification-needed verification-needed-mantic

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-27 Thread Athos Ribeiro
** Changed in: php8.2 (Ubuntu Mantic)
   Status: Triaged => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-27 Thread Athos Ribeiro
** Description changed:

  [ Impact ]
  
  Running fpm_get_status may result in a segmentation fault.
  
  [ Test Plan ]
  
- WIP
+ The following script is a reproducer for the described bug:
+ 
+ #!/bin/bash
+ 
+ set -eux
+ 
+ trap cleanup EXIT
+ 
+ UBUNTU_SERIES=${UBUNTU_SERIIES:-mantic}
+ PHP_VERSION=${PHP_VERSION:-8.2}
+ TEST_CONTAINER=php-fpm-segfault
+ PHP_TEST_FILE=$(mktemp)
+ 
+ cleanup() {
+   rm -f ${PHP_TEST_FILE}
+   lxc delete -f ${TEST_CONTAINER}
+ }
+ 
+ cat > ${PHP_TEST_FILE} <
+ http://localhost/test.php
+ echo 'Number of SIGSEGV failures:'
+ lxc exec ${TEST_CONTAINER} -- sh -c "cat /var/log/php8.2-fpm.log | grep -c 
SIGSEGV"
+ 
+ 
+ Running the script above ensuring the php packages from proposed are 
installed should be enough for SRU verification purposes.
  
  [ Where problems could occur ]
  
  The change in question is straightforward:
  
  We are replacing a string interpolation for a string literal because the
  variables being substituted could result in a null pointer dereference.
  
  Unless some other software components are parsing the logs, which are
  being changed (which would result in chained failures across
  components), issues could occur due to unrelated issues with possible
  new dependencies after a full PHP rebuild.
  
  [ Other Info ]
-  
- This is fixed upstream in php-8.3.1, php-8.2.14, and php-8.1.27. Hence, this 
should be fixed in noble, but needs fixing in mantic, jammy, and focal.
+ 
+ This is fixed upstream in php-8.3.1, php-8.2.14, and php-8.1.27. Hence,
+ this should be fixed in noble, but needs fixing in mantic, jammy, and
+ focal.
  
  [ Original report ]
  
  Like the title says, we do run fpm_get_status a lot. We're trying to get
  metrics about our systems performance this way.
  
  lsb_release -rd:
  Description:  Ubuntu 20.04.6 LTS
  Release:  20.04
  
  apt-cache policy php-fpm
  php-fpm:
    Installed: 2:7.4+75
    Candidate: 2:7.4+75
    Version table:
   *** 2:7.4+75 500
  500 http://fi.archive.ubuntu.com/ubuntu focal/universe amd64 Packages
  100 /var/lib/dpkg/status
  
  I expected it to return fpm status, instead it crashes and kills the
  process.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-26 Thread Athos Ribeiro
** Description changed:

+ [ Impact ]
+ 
+ Running fpm_get_status may result in a segmentation fault.
+ 
+ [ Test Plan ]
+ 
+ WIP
+ 
+ [ Where problems could occur ]
+ 
+ The change in question is straightforward:
+ 
+ We are replacing a string interpolation for a string literal because the
+ variables being substituted could result in a null pointer dereference.
+ 
+ Unless some other software components are parsing the logs, which are
+ being changed (which would result in chained failures across
+ components), issues could occur due to unrelated issues with possible
+ new dependencies after a full PHP rebuild.
+ 
+ [ Other Info ]
+  
+ This is fixed upstream in php-8.3.1, php-8.2.14, and php-8.1.27. Hence, this 
should be fixed in noble, but needs fixing in mantic, jammy, and focal.
+ 
+ [ Original report ]
+ 
  Like the title says, we do run fpm_get_status a lot. We're trying to get
  metrics about our systems performance this way.
  
  lsb_release -rd:
  Description:  Ubuntu 20.04.6 LTS
  Release:  20.04
  
  apt-cache policy php-fpm
  php-fpm:
    Installed: 2:7.4+75
    Candidate: 2:7.4+75
    Version table:
   *** 2:7.4+75 500
  500 http://fi.archive.ubuntu.com/ubuntu focal/universe amd64 Packages
  100 /var/lib/dpkg/status
  
  I expected it to return fpm status, instead it crashes and kills the
  process.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-26 Thread Launchpad Bug Tracker
** Merge proposal linked:
   
https://code.launchpad.net/~athos-ribeiro/ubuntu/+source/php8.2/+git/php8.2/+merge/463141

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-25 Thread Athos Ribeiro
Thanks Lars, I will proceed with the SRUs then!

This is fixed upstream in php-8.3.1, php-8.2.14, and php-8.1.27. Hence,
this should be fixed in noble, but needs fixing in mantic, jammy, and
focal.

** Also affects: php7.4 (Ubuntu Jammy)
   Importance: Undecided
   Status: New

** Also affects: php8.1 (Ubuntu Jammy)
   Importance: Undecided
   Status: New

** Also affects: php8.2 (Ubuntu Jammy)
   Importance: Undecided
   Status: New

** Also affects: php7.4 (Ubuntu Mantic)
   Importance: Undecided
   Status: New

** Also affects: php8.1 (Ubuntu Mantic)
   Importance: Undecided
   Status: New

** Also affects: php8.2 (Ubuntu Mantic)
   Importance: Undecided
   Status: New

** Also affects: php7.4 (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Also affects: php8.1 (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Also affects: php8.2 (Ubuntu Focal)
   Importance: Undecided
   Status: New

** No longer affects: php7.4 (Ubuntu Jammy)

** No longer affects: php7.4 (Ubuntu Mantic)

** No longer affects: php8.1 (Ubuntu Focal)

** No longer affects: php8.1 (Ubuntu Mantic)

** No longer affects: php8.2 (Ubuntu Focal)

** No longer affects: php8.2 (Ubuntu Jammy)

** Changed in: php8.2 (Ubuntu Mantic)
   Status: New => Triaged

** Changed in: php8.1 (Ubuntu Jammy)
   Status: New => Triaged

** Changed in: php8.2 (Ubuntu)
   Status: Triaged => Invalid

** Changed in: php8.1 (Ubuntu)
   Status: Triaged => Invalid

** Changed in: php7.4 (Ubuntu)
   Status: Triaged => Invalid

** Changed in: php7.4 (Ubuntu Focal)
   Status: New => Triaged

** Changed in: php7.4 (Ubuntu)
 Assignee: Athos Ribeiro (athos-ribeiro) => (unassigned)

** Changed in: php7.4 (Ubuntu Focal)
 Assignee: (unassigned) => Athos Ribeiro (athos-ribeiro)

** Changed in: php8.1 (Ubuntu Jammy)
 Assignee: (unassigned) => Athos Ribeiro (athos-ribeiro)

** Changed in: php8.2 (Ubuntu Mantic)
 Assignee: (unassigned) => Athos Ribeiro (athos-ribeiro)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-21 Thread Lars-Göran Karlstedt
Yeah no problem Athos, I feel like maybe you can take it from here. The
official fix is not mine and I haven't even tested that one so I don't
think I'm needed here. Thanks Athos.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-20 Thread Athos Ribeiro
** Also affects: php7.4 (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Also affects: php7.4 (Ubuntu Jammy)
   Importance: Undecided
   Status: New

** Also affects: php7.4 (Ubuntu Mantic)
   Importance: Undecided
   Status: New

** No longer affects: php7.4 (Ubuntu Jammy)

** No longer affects: php7.4 (Ubuntu Mantic)

** Changed in: php7.4 (Ubuntu Focal)
   Status: New => Triaged

** Also affects: php8.1 (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: php8.2 (Ubuntu)
   Importance: Undecided
   Status: New

** No longer affects: php8.1 (Ubuntu Focal)

** No longer affects: php8.2 (Ubuntu Focal)

** No longer affects: php7.4 (Ubuntu Focal)

** Changed in: php8.1 (Ubuntu)
   Status: New => Triaged

** Changed in: php8.2 (Ubuntu)
   Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-19 Thread Athos Ribeiro
Hey Lars, I guess I missed you on IRC (sry).

To answer your question, yes, since we do have an upstream patch
available, it would be better to just go ahead and backport that one!
Not that it is any better or than your own patch. It is just easier to
deal with changes on the same file/function/line in the future if we
stick with those upstream changes!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-15 Thread Athos Ribeiro
Great! All we need for SRUs should be described in
https://wiki.ubuntu.com/StableReleaseUpdates.

We can start with filling the SRU bug template, as described in
https://wiki.ubuntu.com/StableReleaseUpdates#SRU_Bug_Template. We want
to re-write the bug description to  include all those fields described
there.

For the debdiff, you can fetch the patch from
https://github.com/php/php-
src/commit/df259f88daaf7df5673fd78a0a1b76a1d831d0a2.patch and add some
dep3 headers to it (https://dep-team.pages.debian.net/deps/dep3/).

If you need help with anything, feel free to ask here or in IRC (you
will find me in Libera, in #ubuntu-devel or #ubuntu-server (nickname:
athos).

Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-15 Thread Lars-Göran Karlstedt
Yeah sure I can try if you're willing to help. I've tried to learn about
how to work with .deb packages so I know the basics but I'll probably
need some guidance.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-14 Thread Athos Ribeiro
Nice catch, Lars :)

Apparently this had been around for a while and was fixed upstream a few months 
ago:
https://github.com/php/php-src/commit/df259f88daaf7df5673fd78a0a1b76a1d831d0a2

Since you did all the work here so far, would you like to drive the SRU
by providing debdiffs for mantic, jammy, and focal (they are all
affected) and filing the SRU paperwork? I would be happy to guide you
through the process in case you are not familiar with it and would
sponsor (upload) the patches on your behalf.

Otherwise, I will be happy to prepare the SRUs myself.

Thank you!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-14 Thread Lars-Göran Karlstedt
I think I've found what causes the SIGSEGV, see line 59 in
sapi/fpm/fpm/fpm_status.c: It uses scoreboard_p after it checks it for
NULL

57scoreboard_p = fpm_scoreboard_acquire(NULL, 1);
58if (!scoreboard_p) {
59zlog(ZLOG_NOTICE, "[pool %s] status: scoreboard already in 
use.", scoreboard_p->pool); // scoreboard_p is NULL here
60return -1;
61}

Hope this helps.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-14 Thread Athos Ribeiro
** Changed in: php7.4 (Ubuntu)
   Status: New => Triaged

** Changed in: php7.4 (Ubuntu)
 Assignee: (unassigned) => Athos Ribeiro (athos-ribeiro)

** Tags added: server-todo

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-12 Thread Lars-Göran Karlstedt
I've tested on another 20.04.6 and I could reproduce it, here's what I
did:

place this php script somewhere accessible for web-server & php-fpm:

http://localhost/status.php

after a couple of seconds SIGSEGV warnings started to appear in the php-
fpm log.


** Changed in: php7.4 (Ubuntu)
   Status: Incomplete => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-12 Thread Athos Ribeiro
Hi Lars,

Thanks for taking the time to report this bug and help making Ubuntu
better.

I suppose you are able to reproduce the issue constantly then?

Would you mind providing a short (reliable) reproducer for the issue I
could use to verify and investigate from a fresh Ubuntu 20.04
installation?

I am setting this bug status as incomplete. Please, move it back to new
once you provide the additional information.

** Changed in: php7.4 (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2057576] Re: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

2024-03-12 Thread Lars-Göran Karlstedt
** Description changed:

  Like the title says, we do run fpm_get_status a lot. We're trying to get
  metrics about our systems performance this way.
  
  lsb_release -rd:
  Description:  Ubuntu 20.04.6 LTS
  Release:  20.04
  
- apt-cache policy pkgname
+ apt-cache policy php-fpm
  php-fpm:
-   Installed: 2:7.4+75
-   Candidate: 2:7.4+75
-   Version table:
-  *** 2:7.4+75 500
- 500 http://fi.archive.ubuntu.com/ubuntu focal/universe amd64 Packages
- 100 /var/lib/dpkg/status
+   Installed: 2:7.4+75
+   Candidate: 2:7.4+75
+   Version table:
+  *** 2:7.4+75 500
+ 500 http://fi.archive.ubuntu.com/ubuntu focal/universe amd64 Packages
+ 100 /var/lib/dpkg/status
  
  I expected it to return fpm status, instead it crashes and kills the
  process.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2057576

Title:
  php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs