** Description changed:

+ == Impact ==
+ 
+ If setproctitle is installed, celery will call it, making any WSGI
+ application that imports celery at risk.
+ 
+ There are a lot of those in the world.
+ 
+ == Test Case ==
+ 
+ The patch includes a build time unit test that can replicate the bug.
+ 
+ OR
+ 
+ Point apache at this wsgi app:
+ 
+ from wsgiref.simple_server import demo_app
+ import setproctitle
+ application = demo_app
+ 
+ e.g. with WSGIScriptAlias / /var/www/foo.wsgi
+ 
+ == Regression Potential ==
+ 
+ This patch hobbles setproctitle in embedded Pythons. Upstream later
+ added embedded support in 1.1.4, but I don't see any bugs being closed
+ as a result of that.
+ 
+ So, probably minimal.
+ 
+ == ORIGINAL REPORT ==
+ 
  When python-setproctitle is installed alongside mod_wsgi and the wsgi
  application imports setproctitle it causes apache to segfault every time
  a request comes in to that wsgi vhost.
  
  GDB output:
  
  Program terminated with signal SIGSEGV, Segmentation fault.
  #0  fix_argv (argv=0x0, argc=0) at src/setproctitle.c:124
  124   src/setproctitle.c: No such file or directory.
  Traceback (most recent call last):
-   File 
"/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.19-gdb.py", 
line 63, in <module>
-     from libstdcxx.v6.printers import register_libstdcxx_printers
+   File 
"/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.19-gdb.py", 
line 63, in <module>
+     from libstdcxx.v6.printers import register_libstdcxx_printers
  
  This was fixed in version 1.1.1 (https://github.com/dvarrazzo/py-
  setproctitle/issues/9) I recommend that this fix be backported to the
  14.04 version of setproctitle.
  
  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: python-setproctitle 1.0.1-1ubuntu1
  ProcVersionSignature: Ubuntu 3.19.0-42.48~14.04.1-generic 3.19.8-ckt10
  Uname: Linux 3.19.0-42-generic x86_64
  ApportVersion: 2.14.1-0ubuntu3.19
  Architecture: amd64
  Date: Wed Jan 27 20:34:46 2016
  Ec2AMI: ami-9c1f8ef4
  Ec2AMIManifest: (unknown)
  Ec2AvailabilityZone: us-east-1a
  Ec2InstanceType: m4.large
  Ec2Kernel: unavailable
  Ec2Ramdisk: unavailable
  SourcePackage: python-setproctitle
  UpgradeStatus: No upgrade log present (probably fresh install)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1538736

Title:
  setproctitle causes apache mod_wsgi to crash

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-setproctitle/+bug/1538736/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to