php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #80682 opcache doesn't honour pcre.jit option
Submitted: 2021-01-28 15:19 UTC Modified: 2021-01-28 15:29 UTC
From: remi@php.net Assigned: remi (profile)
Status: Closed Package: PCRE related
PHP Version: 7.3.26 OS:
Private report: No CVE-ID: None
 [2021-01-28 15:19 UTC] remi@php.net
Description:
------------
We have a buildtime option HAVE_PCRE_JIT_SUPPORT and a runtime option for pcre2 jit usage PCRE_G(jit)



opcache only honour buildtime option, not the runtime one.


This raise AVC on SElinux enabled system

Test script:
---------------
Start php-fpm service


Expected result:
----------------
No AVC


Actual result:
--------------
type=AVC msg=audit(1611840254.138:10844): avc: denied { execmem } for pid=328163 comm="php-fpm" scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:system_r:httpd_t:s0 tclass=process permissive=1

Patches

Add a Patch

Pull Requests

Pull requests:

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2021-01-28 15:20 UTC] remi@php.net
The following pull request has been associated:

Patch Name: use pcre.jit only if enabled
On GitHub:  https://github.com/php/php-src/pull/6647
Patch:      https://github.com/php/php-src/pull/6647.patch
 [2021-01-28 15:20 UTC] remi@php.net
-Status: Open +Status: Assigned -Assigned To: +Assigned To: remi
 [2021-01-28 15:27 UTC] remi@php.net
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=067f7e4150d8f9bddf6b198c9c7826565ee549b0
Log: Fix #80682 opcache doesn't honour pcre.jit option
 [2021-01-28 15:27 UTC] remi@php.net
-Status: Assigned +Status: Closed
 [2021-01-28 15:29 UTC] cmb@php.net
-Summary: opcache doesn't honour pcre.hit option +Summary: opcache doesn't honour pcre.jit option
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu Mar 28 11:01:27 2024 UTC