php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #13816 Accessing a static HTML page crashes Apache
Submitted: 2001-10-24 13:17 UTC Modified: 2001-11-20 11:02 UTC
From: lupe at lupe-christoph dot de Assigned:
Status: Closed Package: Reproducible crash
PHP Version: 4.0.6 OS: Solaris 8 SPARC
Private report: No CVE-ID: None
View Developer Edit
 [2001-10-24 13:17 UTC] lupe at lupe-christoph dot de 
Config: Apache 1.3.22, mod_perl 1.26 with perl 5.6.1,
        PHP 4.0.6, Sun E250, Solaris 8
PHP configured with apxs like this:
./configure --verbose --prefix=/opt/OCTOapache-1.3.22 --datadir=/opt/OCTOapache-1.3.22/lib --exec-prefix=/opt/OCTOapache-1.3.22 --libexecdir=/opt/OCTOapache-1.3.22/helpers --localstatedir=/opt/OCTOapache-1.3.22/lib --enable-sysvsem -enable-sysvshm --with-ndbm --with-yp --with-ldap=/opt/local/sparc --with-mysql=/opt/OCTOmysql --enable-shmop --with-exec-dir=/opt/OCTOapache-1.3.22/safe-exec --with-config-file-path=/opt/OCTOapache-1.3.22/conf/php3.ini --enable-safe-mode --with-apxs=/opt/OCTOapache-1.3.22/bin/apxs


Just doing a HEAD request on / crashes Apache if libphp4.so
is loaded:

LoadModule php4_module        libexec/libphp4.so
AddModule mod_php4.c

telnet localhost 8088
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
HEAD / HTTP/1.0

Connection closed by foreign host.

This is the tail of the systemcall trace from truss:
11140:  stat64("/opt/OCTOapache-1.3.22/htdocs/index.html.ru.iso-ru", 0x002E3908)
 = 0
11140:  stat64("/opt/OCTOapache-1.3.22/htdocs/index.html.ru.koi8-r", 0x002E3908)
 = 0
11140:  stat64("/opt/OCTOapache-1.3.22/htdocs/index.html.ru.ucs2", 0x002E3908) =
 0
11140:  stat64("/opt/OCTOapache-1.3.22/htdocs/index.html.ru.ucs4", 0x002E3908) =
 0
11140:  stat64("/opt/OCTOapache-1.3.22/htdocs/index.html.ru.utf8", 0x002E3908) =
 0
11140:  getdents64(7, 0x0028C018, 1048)                 = 128
11140:  stat64("/opt/OCTOapache-1.3.22/htdocs/index.html.se", 0x002E3908) = 0
11140:  stat64("/opt/OCTOapache-1.3.22/htdocs/index.html.zh.Big5", 0x002E7908) =
 0
11140:  getdents64(7, 0x0028C018, 1048)                 = 0
11140:  close(7)                                        = 0
11140:  stat64("/opt/OCTOapache-1.3.22/htdocs/index.html.en", 0x002A7500) = 0
11140:      Incurred fault #6, FLTBOUNDS  %pc = 0xFF05990C
11140:        siginfo: SIGSEGV SEGV_MAPERR addr=0x0000005C
11140:      Received signal #11, SIGSEGV [default]
11140:        siginfo: SIGSEGV SEGV_MAPERR addr=0x0000005C
11140:          *** process killed ***

And this is the stack when the crash happens:
core file = /opt/OCTOapache-1.3.22/core -- program ``httpd'' on platform SUNW,Ultra-250
SIGSEGV: Segmentation Fault
$C
yy_get_next_buffer(0x1aafd8,0x1a2818,0x2,0x0,0x0,0x0) + 21c
        [savfp=0xffbef830,savpc=0x7555c]
ap_clear_pool(0x1a2818,0x1a6818,0x0,0x0,0x0,0x0) + 4c
        [savfp=0xffbef8a0,savpc=0x755ec]
ap_destroy_pool(0x1a2818,0x19e818,0x0,0xff238018,0xffbeda11,0x0) + 14
        [savfp=0xffbef910,savpc=0x75544]
ap_clear_pool(0x19e818,0xff23fa9c,0x0,0xa,0x0,0xffbed9d0) + 34
        [savfp=0xffbef980,savpc=0x755ec]
ap_destroy_pool(0x19e818,0x19a9a0,0xd,0x1a2840,0x0,0x16ca98) + 14
        [savfp=0xffbef9f0,savpc=0x8b0b8]
clean_parent_exit(0x0,0x13d2,0xd,0x1a2840,0x16ca98,0x16c800) + 14
        [savfp=0xffbefa60,savpc=0x8f044]
standalone_main(0x1,0xffbefbfc,0x0,0x0,0xff23b03c,0x16cb58) + 764
        [savfp=0xffbefae8,savpc=0x8f824]
main(0x1,0xffbefbfc,0xffbefc04,0x19b5f4,0x0,0x0) + 51c
        [savfp=0xffbefb98,savpc=0x2a320]

When I comment out the LoadModule and the AddModule
line, the HEAD request is OK:

telnet localhost 8088
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Wed, 24 Oct 2001 17:14:57 GMT
Server: Apache/1.3.22 (Unix) mod_perl/1.26
Last-Modified: Fri, 04 May 2001 00:00:38 GMT
ETag: "398ee-5b0-3af1f126"
Accept-Ranges: bytes
Content-Length: 1456
Connection: close
Content-Type: text/html
Content-Language: en

Connection closed by foreign host.

I had PHP 4.0.4pl1 running OK with the same apache.
This happened after I compiled 4.0.6 with the same
configuration and installed it over 4.0.4pl1.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-10-27 06:03 UTC] sniper@php.net 
Did you do 'apachectl stop ; apachectl start' ??
Restart won't work.

--Jani
 [2001-10-28 11:50 UTC] sniper@php.net 
Try removing mod_perl and see if it works then.

--Jani
 [2001-10-29 03:28 UTC] lupe at lupe-christoph dot de 
No crash when Apache is configured without mod_perl.
 [2001-10-29 23:14 UTC] sniper@php.net 
Have you compiled Apache with: --enable-rule=SHARED_CORE

--Jani
 [2001-10-29 23:25 UTC] sniper@php.net 
Another thing if the previous one didn't help might
be that the fix for largefile support in Perl has
been reverted accidently. You could try disabling that.

--Jani
 [2001-10-30 05:26 UTC] lupe at lupe-christoph dot de 
--enable-rule=SHARED_CORE is quite bad, during the mod_perl
"make test" (without the PHP DSO):
/sw/WORK/apache_1.3.22/src/httpd: Unable to exec Shared Core Executable Program `/opt/OCTOapache-1.3.22/libexec/libhttpd.ep'
I would have assumed that the default DSO handling on Solaris
should work. This is not a exotic platform for Apache.

I don't understand the comment about largefile support.
Should it or should it not be switched on in perl?

In any case, I found a workaround - statically linking
*both* mod_perl and PHP makes the crash go away. Seems that
the problem is DSO related.

I changed my PHP config from --with-apxs to --with-apache,
included --activate-module=src/modules/php4/libphp4.a
in the mod_perl configuration and that's all.

I'm willing to look into this more, but I'd need some
guidance where to look.
 [2001-10-30 17:59 UTC] sniper@php.net 
Maybe in Solaris 6 / 7 but not necessarily with 8.
I think you need to compile both mod_perl and PHP as DSO's.
And always use that --enable-rule=SHARED_CORE 
The largefile support should work but you could try
if everything else fails to turn it off.

--Jani
 [2001-11-20 11:02 UTC] sander@php.net 
No feedback. Closing.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed May 07 23:01:27 2025 UTC