php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #70354 php5-fpm[23825]: segfault at 7fff9d58ffe8 ip 0000000000675bdf sp 00007fff9d58ff
Submitted: 2015-08-25 09:30 UTC Modified: 2021-01-17 04:22 UTC
Votes:2
Avg. Score:5.0 ± 0.0
Reproduced:2 of 2 (100.0%)
Same Version:0 (0.0%)
Same OS:1 (50.0%)
From: patrick at oberdorf dot net Assigned: cmb (profile)
Status: No Feedback Package: Unknown/Other Function
PHP Version: 5.5.28 OS: Ubuntu 14.04.3 LTS
Private report: No CVE-ID: None
View Developer Edit
 [2015-08-25 09:30 UTC] patrick at oberdorf dot net 
Description:
------------
Hello,

sometimes PHP-FPM just crashes. The same issue occurred on 2 independent Server.
Currently these packages are installed:

ii  php5-apcu                           4.0.6-1+deb.sury.org~trusty+1        amd64        APC User Cache for PHP 5
ii  php5-cli                            5.5.28+dfsg-1+deb.sury.org~trusty+1  amd64        command-line interpreter for the php5 scripting language
ii  php5-common                         5.5.28+dfsg-1+deb.sury.org~trusty+1  amd64        Common files for packages built from the php5 source
ii  php5-curl                           5.5.28+dfsg-1+deb.sury.org~trusty+1  amd64        CURL module for php5
ii  php5-fpm                            5.5.28+dfsg-1+deb.sury.org~trusty+1  amd64        server-side, HTML-embedded scripting language (FPM-CGI binary)
ii  php5-gd                             5.5.28+dfsg-1+deb.sury.org~trusty+1  amd64        GD module for php5
ii  php5-json                           1.3.7-1+deb.sury.org~trusty+1        amd64        JSON module for php5
ii  php5-mcrypt                         5.5.28+dfsg-1+deb.sury.org~trusty+1  amd64        MCrypt module for php5
ii  php5-memcached                      2.2.0-2+deb.sury.org~trusty+1        amd64        memcached extension module for PHP5, uses libmemcached
ii  php5-mysql                          5.5.28+dfsg-1+deb.sury.org~trusty+1  amd64        MySQL module for php5
ii  php5-readline                       5.5.28+dfsg-1+deb.sury.org~trusty+1  amd64        Readline module for php5

I have the same issue with the official packages from Ubuntu trusty.

Actual result:
--------------
GNU gdb (Ubuntu 7.7.1-0ubuntu5~14.04.2) 7.7.1
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/sbin/php5-fpm...(no debugging symbols found)...done.
[New LWP 23825]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `php-fpm: pool www                                                       '.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x0000000000675bdf in ?? ()
Traceback (most recent call last):
  File "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.19-gdb.py", line 63, in <module>
    from libstdcxx.v6.printers import register_libstdcxx_printers
ImportError: No module named 'libstdcxx'
#0  0x0000000000675bdf in ?? ()
#1  0x000000000067709b in vspprintf ()
#2  0x00000000006ebbb9 in zend_spprintf ()
#3  0x00000000006c8ec6 in _convert_to_string ()
#4  0x00000000006d2b09 in zend_make_printable_zval ()
#5  0x00000000006cd667 in concat_function ()
#6  0x000000000072cf06 in ?? ()
#7  0x00000000006fbea8 in execute_ex ()
#8  0x00000000006c1a99 in dtrace_execute_ex ()
#9  0x000000000078346e in ?? ()
#10 0x00000000006fbea8 in execute_ex ()
#11 0x00000000006c1a99 in dtrace_execute_ex ()
#12 0x000000000078346e in ?? ()
#13 0x00000000006fbea8 in execute_ex ()
#14 0x00000000006c1a99 in dtrace_execute_ex ()
#15 0x000000000078346e in ?? ()
#16 0x00000000006fbea8 in execute_ex ()
#17 0x00000000006c1a99 in dtrace_execute_ex ()
#18 0x000000000078346e in ?? ()
#19 0x00000000006fbea8 in execute_ex ()
#20 0x00000000006c1a99 in dtrace_execute_ex ()
#21 0x000000000078346e in ?? ()
#22 0x00000000006fbea8 in execute_ex ()
#23 0x00000000006c1a99 in dtrace_execute_ex ()
#24 0x000000000078346e in ?? ()
#25 0x00000000006fbea8 in execute_ex ()
#26 0x00000000006c1a99 in dtrace_execute_ex ()
#27 0x000000000078346e in ?? ()
#28 0x00000000006fbea8 in execute_ex ()
#29 0x00000000006c1a99 in dtrace_execute_ex ()
#30 0x000000000078346e in ?? ()
#31 0x00000000006fbea8 in execute_ex ()
#32 0x00000000006c1a99 in dtrace_execute_ex ()
#33 0x000000000078346e in ?? ()
#34 0x00000000006fbea8 in execute_ex ()
#35 0x00000000006c1a99 in dtrace_execute_ex ()
#36 0x000000000078346e in ?? ()
#37 0x00000000006fbea8 in execute_ex ()
#38 0x00000000006c1a99 in dtrace_execute_ex ()
#39 0x000000000078346e in ?? ()
#40 0x00000000006fbea8 in execute_ex ()
#41 0x00000000006c1a99 in dtrace_execute_ex ()
#42 0x000000000078346e in ?? ()
#43 0x00000000006fbea8 in execute_ex ()
#44 0x00000000006c1a99 in dtrace_execute_ex ()
#45 0x000000000078346e in ?? ()
#46 0x00000000006fbea8 in execute_ex ()
#47 0x00000000006c1a99 in dtrace_execute_ex ()
#48 0x000000000078346e in ?? ()
#49 0x00000000006fbea8 in execute_ex ()
#50 0x00000000006c1a99 in dtrace_execute_ex ()
#51 0x000000000078346e in ?? ()
#52 0x00000000006fbea8 in execute_ex ()
#53 0x00000000006c1a99 in dtrace_execute_ex ()
(...)
#68167 0x00000000006fbea8 in execute_ex ()
#68168 0x00000000006c1a99 in dtrace_execute_ex ()
#68169 0x00000000006d33c0 in zend_execute_scripts ()
#68170 0x00000000006736b2 in php_execute_script ()
#68171 0x00000000004622e1 in main ()

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2015-08-25 11:57 UTC] cmb@php.net
-Status: Open +Status: Feedback
 [2015-08-25 11:57 UTC] cmb@php.net 
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.
 [2015-08-25 12:25 UTC] patrick at oberdorf dot net
-Status: Feedback +Status: Open
 [2015-08-25 12:25 UTC] patrick at oberdorf dot net 
Thanks for your respond.
I don't see which script is causing the problem, because I always get this output:
(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
Attempt to extract a component of a value that is not a structure.
 [2021-01-06 14:08 UTC] cmb@php.net 
Do you still get this segfault with any of the actively supported
PHP versions[1]?

[1] <https://www.php.net/supported-versions.php>
 [2021-01-06 14:08 UTC] cmb@php.net
-Status: Open +Status: Feedback -Assigned To: +Assigned To: cmb
 [2021-01-17 04:22 UTC] php-bugs at lists dot php dot net 
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Sun Dec 22 06:01:30 2024 UTC