php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #80682 opcache doesn't honour pcre.jit option
Submitted: 2021-01-28 15:19 UTC Modified: 2021-01-28 15:29 UTC
From: remi@php.net Assigned: remi (profile)
Status: Closed Package: PCRE related
PHP Version: 7.3.26 OS:
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: remi@php.net
New email:
PHP Version: OS:

 

 [2021-01-28 15:19 UTC] remi@php.net
Description:
------------
We have a buildtime option HAVE_PCRE_JIT_SUPPORT and a runtime option for pcre2 jit usage PCRE_G(jit)



opcache only honour buildtime option, not the runtime one.


This raise AVC on SElinux enabled system

Test script:
---------------
Start php-fpm service


Expected result:
----------------
No AVC


Actual result:
--------------
type=AVC msg=audit(1611840254.138:10844): avc: denied { execmem } for pid=328163 comm="php-fpm" scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:system_r:httpd_t:s0 tclass=process permissive=1

Patches

Pull Requests

Pull requests:

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2021-01-28 15:20 UTC] remi@php.net
The following pull request has been associated:

Patch Name: use pcre.jit only if enabled
On GitHub:  https://github.com/php/php-src/pull/6647
Patch:      https://github.com/php/php-src/pull/6647.patch
 [2021-01-28 15:20 UTC] remi@php.net
-Status: Open +Status: Assigned -Assigned To: +Assigned To: remi
 [2021-01-28 15:27 UTC] remi@php.net
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=067f7e4150d8f9bddf6b198c9c7826565ee549b0
Log: Fix #80682 opcache doesn't honour pcre.jit option
 [2021-01-28 15:27 UTC] remi@php.net
-Status: Assigned +Status: Closed
 [2021-01-28 15:29 UTC] cmb@php.net
-Summary: opcache doesn't honour pcre.hit option +Summary: opcache doesn't honour pcre.jit option
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu Nov 21 14:01:29 2024 UTC