php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #30676 Segmentation fault with "mm",PHP works fine with "files"
Submitted: 2004-11-03 18:27 UTC Modified: 2004-11-24 01:00 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:1 (100.0%)
From: joe dot maldonado at gmail dot com Assigned:
Status: No Feedback Package: Session related
PHP Version: 4.3.9 OS: RH9.0
Private report: No CVE-ID: None
View Developer Edit
 [2004-11-03 18:27 UTC] joe dot maldonado at gmail dot com 
Description:
------------
From time to time the Apache child will terminate on a segmentation fault (11) and after some time the webserver needs to be restarted.

This started happening when I changed to using mm version 1.3.1.  It stopped happening when the save_handler was changed to files

current config:
PHP 4.3.9/Apache 2.0.51 with mm v 1.3.1.


Actual result:
--------------
bt from core file:
(gdb) bt
#0  ps_mm_destroy (data=0x825d060) at /root/src/apache/php-4.3.9/ext/session/mod_mm.c:243
#1  0x1839cea9 in zm_shutdown_ps_mm (type=1, module_number=5)
    at /root/src/apache/php-4.3.9/ext/session/mod_mm.c:295
#2  0x1839be98 in zm_shutdown_session (type=1, module_number=5)
    at /root/src/apache/php-4.3.9/ext/session/session.c:1665
#3  0x18433659 in module_destructor (module=0x82684b0) at /root/src/apache/php-4.3.9/Zend/zend_API.c:1125
#4  0x1843565c in zend_hash_apply_deleter (ht=0x1860abe0, p=0x8268480)
    at /root/src/apache/php-4.3.9/Zend/zend_hash.c:611
#5  0x184356ea in zend_hash_graceful_reverse_destroy (ht=0x1860abe0)
    at /root/src/apache/php-4.3.9/Zend/zend_hash.c:677
#6  0x18430b7d in zend_shutdown () at /root/src/apache/php-4.3.9/Zend/zend.c:556
#7  0x1840a9c7 in php_module_shutdown () at /root/src/apache/php-4.3.9/main/main.c:1286
#8  0x1840a98e in php_module_shutdown_wrapper (sapi_globals=0x185ef520)
    at /root/src/apache/php-4.3.9/main/main.c:1263
#9  0x184421b8 in php_apache_server_shutdown (tmp=0x0)
    at /root/src/apache/php-4.3.9/sapi/apache2handler/sapi_apache2.c:328
#10 0x18106af9 in run_cleanups (cref=0x8190ee8) at apr_pools.c:1951
#11 0x18106353 in apr_pool_destroy (pool=0x8190ed8) at apr_pools.c:730
#12 0x1810641f in apr_pool_destroy (pool=0x818eed0) at apr_pools.c:727
#13 0x080b2ca8 in destroy_and_exit_process (process=0x185ef520, process_exit_value=0) at main.c:208
#14 0x080b3614 in main (argc=4, argv=0xbfffdc84) at main.c:624
#15 0x181e85cd in __libc_start_main () from /lib/libc.so.6
(gdb)

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-11-16 12:23 UTC] tony2001@php.net 
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc.

If possible, make the script source available online and provide
an URL to it here. Try avoid embedding huge scripts into the report.
 [2004-11-24 01:00 UTC] php-bugs at lists dot php dot net 
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 [2005-02-10 17:06 UTC] p dot metras at onf dot ca 
I had the same problem on a production system (sorry, not able to get a trace). Switching to session.save_handler=files made the problem disappear.

My configuration is Sun Solaris 2.9, Apache 1.3.33, PHP 4.3.10, mm 1.3.0
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Fri May 09 08:01:35 2025 UTC