PHP :: Request #30788 :: Tomcat 5.0.28 crashes during session sharing between servlet and PHP

Tomcat 5.0.28 crashes during session sharing between servlet and PHP

Submitted:

2004-11-15 06:30 UTC

Modified:

2017-01-29 04:22 UTC

Votes:	2
Avg. Score:	4.5 ± 0.5
Reproduced:	1 of 2 (50.0%)
Same Version:	1 (100.0%)
Same OS:	0 (0.0%)

From:

sgovindu at yahoo dot com

Assigned:

Status:

No Feedback

Package:

*General Issues

PHP Version:

4.3.9

OS:

Red Hat Linux release 9 (Shrike)

Private report:

CVE-ID:

None

View Developer Edit

[2004-11-15 06:30 UTC] sgovindu at yahoo dot com

Description:
------------
1. Configured mod_jk2 in apache to serve jsp, servlet as well as PHP through tomcat.
2. Created a simple servlet which creates or destroys a HTTP session.
3. After the session gets created, accessed a PHP to print the session data.
4. On a successive cycle of create session and destroy session more than 5 times, tomcat crashes.

java version "1.4.2_05"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_05-b04)
Java HotSpot(TM) Client VM (build 1.4.2_05-b04, mixed mode)

Version: Apache Tomcat/5.0.28


Reproduce code:
---------------
<?php
  $session = $request->session;
  print "<P>\n";
  print "The following data is in your session:<br>\n";
  $e = $session->attributeNames;
  while($e->hasMoreElements())
  {
    $name = $e->nextElement();
    $value = $session->getAttribute($name);
    print "$name = $value<br>\n";
  }
?>
Sessions example of tomcat has been used to create or detroy a session


Expected result:
----------------
Session created in servlet should be displayed by the PHP code.

Actual result:
--------------
An unexpected exception has been detected in native code outside the VM.
Unexpected Signal : 11 occurred at PC=0x4E9C4036
Function=zend_hash_index_update_or_next_insert+0x3A
Library=/home/testuser/sastry/php-4.3.9/libs/libphp4.so

Current Java thread:
        at net.php.reflect.setResultFromObject(Native Method)
        at net.php.reflect.setResult(reflect.java:105)
        at net.php.servlet.readCookies(servlet.java:93)
        at net.php.servlet.send(Native Method)
        at net.php.servlet.service(servlet.java:190)
        at net.php.servlet.service(servlet.java:214)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
        at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:198)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:152)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:462)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:118)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
        at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929)
        at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160)
        at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:300)
        at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:374)
        at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:743)
        at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:675)
        at org.apache.jk.common.SocketConnection.runIt(ChannelSocket.java:866)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
        at java.lang.Thread.run(Thread.java:534)

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

[2004-11-16 07:18 UTC] sgovindu at yahoo dot com

Seems to be a memory related issue. On compiling php in debug mode, the crash is gone.

[2004-11-18 10:07 UTC] sgovindu at yahoo dot com

Memory leaks are happening continously (some of the output messages):
/usr/local/php-4.3.9/ext/standard/array.c(2074) :  Freeing 0x090B99D8 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_API.c(562) : Actual location (location was relayed)
/usr/local/php-4.3.9/Zend/zend_execute.c(1635) :  Freeing 0x090B9998 (12 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_execute_API.c(341) :  Freeing 0x09118950 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_variables.c(123) : Actual location (location was relayed)
Last leak repeated 1 time
/usr/local/php-4.3.9/Zend/zend_execute_API.c(314) :  Freeing 0x091188D0 (12 bytes), script=-
Last leak repeated 2 times
/usr/local/php-4.3.9/Zend/zend_execute.c(1789) :  Freeing 0x091B9C78 (17 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_variables.c(111) : Actual location (location was relayed)
Last leak repeated 1 time
/usr/local/php-4.3.9/Zend/zend_compile.c(1872) :  Freeing 0x0913DF50 (12 bytes), script=-
Last leak repeated 16 times
Zend/zend_language_scanner.c(4728) :  Freeing 0x09128C58 (16 bytes), script=-
Last leak repeated 12 times
/usr/local/php-4.3.9/Zend/zend_compile.c(1676) :  Freeing 0x09158448 (12 bytes), script=-
Last leak repeated 2 times
Zend/zend_language_parser.c(2860) :  Freeing 0x0915A560 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_API.c(562) : Actual location (location was relayed)
Last leak repeated 1 time
Zend/zend_language_parser.c(2872) :  Freeing 0x09114A70 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_API.c(562) : Actual location (location was relayed)
/usr/local/php-4.3.9/sapi/servlet/servlet.c(334) :  Freeing 0x090AC070 (9 bytes), script=-
/usr/local/php-4.3.9/sapi/servlet/servlet.c(331) :  Freeing 0x090A8440 (5 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_hash.c(275) :  Freeing 0x0911C088 (41 bytes), script=-
Last leak repeated 67 times
/usr/local/php-4.3.9/Zend/zend_execute.c(2007) :  Freeing 0x0911C008 (12 bytes), script=-
Last leak repeated 2 times
/usr/local/php-4.3.9/ext/xml/xml.c(512) :  Freeing 0x0911BDF8 (18 bytes), script=-
Last leak repeated 11 times
/usr/local/php-4.3.9/Zend/zend_execute.c(1837) :  Freeing 0x0911BD98 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_variables.c(138) : Actual location (location was relayed)
Last leak repeated 3 times
/usr/local/php-4.3.9/Zend/zend_API.c(678) :  Freeing 0x0911BCB8 (12 bytes), script=-
Last leak repeated 11 times
/usr/local/php-4.3.9/Zend/zend_hash.c(199) :  Freeing 0x0911BB40 (32 bytes), script=-
Last leak repeated 14 times
/usr/local/php-4.3.9/Zend/zend_execute.c(1833) :  Freeing 0x0911B928 (12 bytes), script=-
Last leak repeated 3 times
/usr/local/php-4.3.9/Zend/zend_hash.c(419) :  Freeing 0x0911B138 (35 bytes), script=-
Last leak repeated 9 times
/usr/local/php-4.3.9/Zend/zend_execute.c(501) :  Freeing 0x0911AE48 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_variables.c(138) : Actual location (location was relayed)
Last leak repeated 1 time
/usr/local/php-4.3.9/Zend/zend_execute.c(279) :  Freeing 0x0911AC50 (12 bytes), script=-
Last leak repeated 4 times
/usr/local/php-4.3.9/Zend/zend_execute.c(509) :  Freeing 0x0911A880 (12 bytes), script=-
Last leak repeated 6 times
/usr/local/php-4.3.9/Zend/zend_execute.c(2058) :  Freeing 0x0911A628 (12 bytes), script=-
Last leak repeated 2 times
/usr/local/php-4.3.9/Zend/zend_execute.c(498) :  Freeing 0x09119DF0 (12 bytes), script=-
Last leak repeated 2 times
/usr/local/php-4.3.9/Zend/zend_execute.c(2038) :  Freeing 0x09119AB0 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_API.c(562) : Actual location (location was relayed)
Last leak repeated 2 times
/usr/local/php-4.3.9/Zend/zend_execute.c(2061) :  Freeing 0x091196E8 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_variables.c(138) : Actual location (location was relayed)
Last leak repeated 2 times
/usr/local/php-4.3.9/ext/xml/xml.c(262) :  Freeing 0x09118658 (13 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_API.c(594) :  Freeing 0x090FD4F8 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_API.c(582) : Actual location (location was relayed)
Last leak repeated 1 time
/usr/local/php-4.3.9/ext/xml/xml.c(258) :  Freeing 0x090FD458 (12 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_execute.c(2323) :  Freeing 0x090FD218 (12 bytes), script=-
Last leak repeated 1 time
/usr/local/php-4.3.9/Zend/zend_execute.c(1786) :  Freeing 0x090FB4A0 (12 bytes), script=-
Last leak repeated 1 time
/usr/local/php-4.3.9/Zend/zend_execute.c(1882) :  Freeing 0x090FB230 (12 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_hash.c(453) :  Freeing 0x090FB100 (64 bytes), script=-
Last leak repeated 2 times
/usr/local/php-4.3.9/ext/standard/array.c(2074) :  Freeing 0x090FA770 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_API.c(562) : Actual location (location was relayed)
/usr/local/php-4.3.9/Zend/zend_execute.c(1635) :  Freeing 0x090FA730 (12 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_execute_API.c(341) :  Freeing 0x09117418 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_variables.c(123) : Actual location (location was relayed)
Last leak repeated 1 time
/usr/local/php-4.3.9/Zend/zend_execute_API.c(314) :  Freeing 0x09117398 (12 bytes), script=-
Last leak repeated 2 times
/usr/local/php-4.3.9/Zend/zend_execute.c(1789) :  Freeing 0x090B8DD0 (17 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_variables.c(111) : Actual location (location was relayed)
Last leak repeated 1 time
/usr/local/php-4.3.9/Zend/zend_compile.c(1872) :  Freeing 0x0910BD48 (12 bytes), script=-
Last leak repeated 16 times
Zend/zend_language_scanner.c(4728) :  Freeing 0x09131CA0 (16 bytes), script=-
Last leak repeated 12 times
/usr/local/php-4.3.9/Zend/zend_compile.c(1676) :  Freeing 0x091010A0 (12 bytes), script=-
Last leak repeated 2 times
Zend/zend_language_parser.c(2860) :  Freeing 0x09078398 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_API.c(562) : Actual location (location was relayed)
Last leak repeated 1 time
Zend/zend_language_parser.c(2872) :  Freeing 0x09161450 (44 bytes), script=-
/usr/local/php-4.3.9/Zend/zend_API.c(562) : Actual location (location was relayed)
/usr/local/php-4.3.9/sapi/servlet/servlet.c(334) :  Freeing 0x09170B50 (9 bytes), script=-
/usr/local/php-4.3.9/sapi/servlet/servlet.c(331) :  Freeing 0x0907A438 (5 bytes), script=-

[2017-01-20 20:24 UTC] heiglandreas@php.net

-Status: Open +Status: Feedback -Package: Feature/Change Request +Package: *General Issues

[2017-01-20 20:24 UTC] heiglandreas@php.net

Is this still relevant?

[2017-01-29 04:22 UTC] php-bugs at lists dot php dot net

No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2025 The PHP Group All rights reserved.	Last updated: Wed Oct 29 13:00:01 2025 UTC