php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #58121 Non-deterministic blank pages when navigating a MediaWiki site
Submitted: 2008-03-26 08:58 UTC Modified: 2008-03-28 15:55 UTC
From: jldupont@php.net Assigned:
Status: Closed Package: APC (PECL)
PHP Version: 5.2.4 OS: FC4
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: jldupont@php.net
New email:
PHP Version: OS:

 

 [2008-03-26 08:58 UTC] jldupont@php.net
Description:
------------
I get non-deterministic blank-pages after a couple of hits on my MediaWiki v1.11.0 install running PHP 5.2.4 on a 1and1 VPS FC4.

The site used to run very fine with APC v3.0.16 on PHP 5.2.4.


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2008-03-26 09:42 UTC] gopalv82 at yahoo dot com
Would you like the security fix to 3.0.16, without the rest of the fixes?

And what does your cache full count say?
 [2008-03-26 12:44 UTC] aturner at godaddy dot com
I'm running PHP 5.2.4 on Linux Fedora Core 7 and PHP 5.2.3 on FreeBSD, and 3.0.17 breaks every page after APC caches it.  The following errors were in my Apache error logs:

zend_mm_heap corrupted
[Wed Mar 26 13:32:57 2008] [notice] child pid 18103 exit signal Segmentation fault (11)
zend_mm_heap corrupted
...

I believe this is related.
 [2008-03-26 13:13 UTC] email at steffenweber dot net
I'm seeing those "zend_mm_heap corrupted" messages, too. For example in phpMyAdmin, in Horde IMP and in our homegrown CMS. We are running PHP 5.2.6-rc1 on x86_64 (Gentoo). APC 3.0.16 works fine. APC 3.0.16 + Security Fix from 3.0.17 works fine. But APC 3.0.17 shows the mentioned error messages in Apache's error log.
 [2008-03-26 15:19 UTC] jbyers at jbyers dot com
Same situation.  PHP 5.2.4, RHEL4-64, fastcgi.  3.0.16 is stable, 3.0.17 has frequent mm_heap_corruption segfaults on an empty cache.  It would take some time to generate a backtrace, but I can provide one if needed.

Please do post the CVE-2008-1488 patch against 3.0.16 -- maybe also in the original bug thread, #13415.  I did the same as others here and back-ported the patch from .17, but an official patch would reassure me I didn't misunderstand what that strlcpy needed to do. :)
 [2008-03-26 17:24 UTC] gehrig at ishd dot de
Same problem here...
PHP 5.2.4, get "zend_mm_heap corrupted" in Apache logfile when running APC 3.0.17. Switching back to APC 3.0.16 corrects the problem.
 [2008-03-26 18:08 UTC] email at steffenweber dot net
@jbyers: I have used the following patch: http://steffenweber.net/files/apc-cve-2008-1488.diff (MD5 9c12c61f0980ef637a7213bf99145a27)

Please note that I have just tried to make Rasmus' patch (http://cvsweb.php.net/viewvc.cgi/pecl/apc/apc.c?r1=3.20&r2=3.21) work with APC 3.0.16. I'm not really a C programmer.
 [2008-03-27 01:54 UTC] tom at fpsbanana dot com
I just filed a similar bug report. Log into your shell and check your aborted_clients MySQL variable.

> mysql
 > SHOW STATUS;
 [2008-03-27 05:47 UTC] gopalv82 at yahoo dot com
People, people ... I may have done something stupid in the merge.

Please test APC cvs HEAD to confirm that I did do bad or whether 3.1.x is going to b0rked as well. The quicker we know, the better.

cvs -d :pserver:cvsread@cvs.php.net:/repository checkout pecl/apc

phpize && ./configure && make

sudo make install

(while, I read the code merges all over again)
 [2008-03-27 12:14 UTC] vincent at applesolutions dot com
CVS head exhibits the same behavior on the PHP 5.2.3/FreeBSD case mentioned earlier.
 [2008-03-28 06:40 UTC] email at steffenweber dot net
I have just checked out CVS head using Gopals instructions five minutes ago and see "zend_mm_heap corrupted" messages in the logs, too.
 [2008-03-28 06:47 UTC] gopalv82 at yahoo dot com
Thank you, I'll update CVS HEAD in the hour with a possible fix.
 [2008-03-28 09:03 UTC] gopalv82 at yahoo dot com
Mind testing, 

http://t3.dotgnu.info/code/apc-3.0.18-RC.patch

on top of 3.0.17? 

(and thanks for the debugging & testing CVS HEAD)
 [2008-03-28 10:18 UTC] email at steffenweber dot net
On first glance this patch seems to fix the bug. I'll report back later when I'm a little more confident. :)
 [2008-03-28 11:50 UTC] email at steffenweber dot net
For me, the problem is definately gone with your patch. Thank you very much!
 [2008-03-28 15:55 UTC] rasmus@php.net
Should be fixed in 3.0.18 now.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Thu Jul 03 22:01:33 2025 UTC