From:             nicolyon at free dot fr
Operating system: Linux
PHP version:      5.4.12
Package:          OpenSSL related
Bug Type:         Bug
Bug description:Segfault when accepting ssl connection

Description:
------------
When accepting a connection from a SSL socket with openssl >= 1.0.1d PHP
crash.
When using openssl 1.0.1c or lower there's no crash.

Here the stack :
#0  0x00007f2f58eafd1a in ssl_set_cert_masks () from
/usr/lib/libssl.so.1.0.0
#1  0x00007f2f58eb0596 in ssl_get_server_send_pkey () from 
/usr/lib/libssl.so.1.0.0
#2  0x00007f2f58eb0689 in ssl_get_server_send_cert () from 
/usr/lib/libssl.so.1.0.0
#3  0x00007f2f4c84bf23 in php_SSL_new_from_context () from 
/usr/lib/php/extensions/openssl.so
#4  0x00007f2f4c84d5b9 in php_openssl_sockop_set_option () from 
/usr/lib/php/extensions/openssl.so
#5  0x00000000006247cc in _php_stream_set_option ()
#6  0x000000000062fe9e in php_stream_xport_crypto_setup ()
#7  0x00007f2f4c84d294 in php_openssl_sockop_set_option () from 
/usr/lib/php/extensions/openssl.so
#8  0x00000000006247cc in _php_stream_set_option ()
#9  0x000000000062fcb9 in php_stream_xport_accept ()
#10 0x00000000005c9e9c in zif_stream_socket_accept ()


Test script:
---------------
$context = stream_context_create();
$errno = 0;
$errstr = "";
$s = stream_socket_server( "ssl://127.0.0.1:800", $errno, $errstr,
STREAM_SERVER_BIND | STREAM_SERVER_LISTEN, $context );



do just telnet localhost 800 for crash 

Expected result:
----------------
no crash

Actual result:
--------------
segfault

-- 
Edit bug report at https://bugs.php.net/bug.php?id=64355&edit=1
-- 
Try a snapshot (PHP 5.4):   
https://bugs.php.net/fix.php?id=64355&r=trysnapshot54
Try a snapshot (PHP 5.3):   
https://bugs.php.net/fix.php?id=64355&r=trysnapshot53
Try a snapshot (trunk):     
https://bugs.php.net/fix.php?id=64355&r=trysnapshottrunk
Fixed in SVN:               https://bugs.php.net/fix.php?id=64355&r=fixed
Fixed in release:           https://bugs.php.net/fix.php?id=64355&r=alreadyfixed
Need backtrace:             https://bugs.php.net/fix.php?id=64355&r=needtrace
Need Reproduce Script:      https://bugs.php.net/fix.php?id=64355&r=needscript
Try newer version:          https://bugs.php.net/fix.php?id=64355&r=oldversion
Not developer issue:        https://bugs.php.net/fix.php?id=64355&r=support
Expected behavior:          https://bugs.php.net/fix.php?id=64355&r=notwrong
Not enough info:            
https://bugs.php.net/fix.php?id=64355&r=notenoughinfo
Submitted twice:            
https://bugs.php.net/fix.php?id=64355&r=submittedtwice
register_globals:           https://bugs.php.net/fix.php?id=64355&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=64355&r=php4
Daylight Savings:           https://bugs.php.net/fix.php?id=64355&r=dst
IIS Stability:              https://bugs.php.net/fix.php?id=64355&r=isapi
Install GNU Sed:            https://bugs.php.net/fix.php?id=64355&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=64355&r=float
No Zend Extensions:         https://bugs.php.net/fix.php?id=64355&r=nozend
MySQL Configuration Error:  https://bugs.php.net/fix.php?id=64355&r=mysqlcfg

Reply via email to