#39020 [Opn]: PHP in FastCGI server mode crashes

ID: 39020 User updated by: hugo at leisink dot net Reported By: hugo at leisink dot net Status: Open Bug Type: Reproducible crash Operating System: Debian Linux PHP Version: 5.1.6 New Comment: And here is the tcpdump output for a request (myphpadmin website) that crashes PHP in fastcgi mode: 09:01:20.192597 IP localhost.localdomain.42965 > localhost.localdomain.2345: S 871050168:871050168(0) win 32767 <mss 16396,sackOK,timestamp 921071067 0,nop,wscale 0> 0x0000: 4500 003c 4663 4000 4006 f656 7f00 0001 E..<Fc@.@..V.... 0x0010: 7f00 0001 a7d5 0929 33eb 2bb8 0000 0000 .......)3.+..... 0x0020: a002 7fff da49 0000 0204 400c 0402 080a .....I....@..... 0x0030: 36e6 6ddb 0000 0000 0103 0300 6.m......... 09:01:20.192632 IP localhost.localdomain.2345 > localhost.localdomain.42965: S 885975743:885975743(0) ack 871050169 win 32767 <mss 16396,sackOK,timestamp 921071067 921071067,nop,wscale 0> 0x0000: 4500 003c 0000 4000 4006 3cba 7f00 0001 E..<..@.@.<..... 0x0010: 7f00 0001 0929 a7d5 34ce eabf 33eb 2bb9 .....)..4...3.+. 0x0020: a012 7fff 15e9 0000 0204 400c 0402 080a ..........@..... 0x0030: 36e6 6ddb 36e6 6ddb 0103 0300 6.m.6.m..... 09:01:20.192660 IP localhost.localdomain.42965 > localhost.localdomain.2345: . ack 1 win 32767 <nop,nop,timestamp 921071067 921071067> 0x0000: 4500 0034 4664 4000 4006 f65d 7f00 0001 E..4Fd@.@..].... 0x0010: 7f00 0001 a7d5 0929 33eb 2bb9 34ce eac0 .......)3.+.4... 0x0020: 8010 7fff 7f06 0000 0101 080a 36e6 6ddb ............6.m. 0x0030: 36e6 6ddb 6.m. 09:01:20.193329 IP localhost.localdomain.42965 > localhost.localdomain.2345: P 1:883(882) ack 1 win 32767 <nop,nop,timestamp 921071067 921071067> 0x0000: 4500 03a6 4665 4000 4006 f2ea 7f00 0001 E...Fe@.@....... 0x0010: 7f00 0001 a7d5 0929 33eb 2bb9 34ce eac0 .......)3.+.4... 0x0020: 8018 7fff 463e 0000 0101 080a 36e6 6ddb ....F>......6.m. 0x0030: 36e6 6ddb 0101 0001 0008 0000 0001 0000 6.m............. 0x0040: 0000 0000 0104 0001 0352 0000 1107 4741 .........R....GA 0x0050: 5445 5741 595f 494e 5445 5246 4143 4543 TEWAY_INTERFACEC 0x0060: 4749 2f31 2e31 0d1c 444f 4355 4d45 4e54 GI/1.1..DOCUMENT 0x0070: 5f52 4f4f 542f 686f 6d65 2f77 6562 7369 _ROOT/home/websi 0x0080: 7465 732f 6c65 6973 696e 6b2f 6d79 7371 tes/leisink/mysq 0x0090: 6c0e 0352 4551 5545 5354 5f4d 4554 484f l..REQUEST_METHO 0x00a0: 4447 4554 0b01 5245 5155 4553 545f 5552 DGET..REQUEST_UR 0x00b0: 492f 0b0a 5343 5249 5054 5f4e 414d 452f I/..SCRIPT_NAME/ 0x00c0: 696e 6465 782e 7068 700f 2653 4352 4950 index.php.&SCRIP 0x00d0: 545f 4649 4c45 4e41 4d45 2f68 6f6d 652f T_FILENAME/home/ 0x00e0: 7765 6273 6974 6573 2f6c 6569 7369 6e6b websites/leisink 0x00f0: 2f6d 7973 716c 2f69 6e64 6578 2e70 6870 /mysql/index.php 0x0100: 0b08 5245 4d4f 5445 5f41 4444 5231 302e ..REMOTE_ADDR10. 0x0110: 342e 302e 320b 0353 4552 5645 525f 504f 4.0.2..SERVER_PO 0x0120: 5254 3434 330b 1153 4552 5645 525f 4e41 RT443..SERVER_NA 0x0130: 4d45 6d79 7371 6c2e 6c65 6973 696e 6b2e MEmysql.leisink. 0x0140: 6f72 670f 0853 4552 5645 525f 5052 4f54 org..SERVER_PROT 0x0150: 4f43 4f4c 4854 5450 2f31 2e31 0f0d 5345 OCOLHTTP/1.1..SE 0x0160: 5256 4552 5f53 4f46 5457 4152 4548 6961 RVER_SOFTWAREHia 0x0170: 7761 7468 6120 7635 2e30 0f03 5245 4449 watha.v5.0..REDI 0x0180: 5245 4354 5f53 5441 5455 5332 3030 0f03 RECT_STATUS200.. 0x0190: 434f 4e4e 4543 5449 4f4e 5f54 5950 4553 CONNECTION_TYPES 0x01a0: 534c 0b63 4854 5450 5f41 4343 4550 5474 SL.cHTTP_ACCEPTt 0x01b0: 6578 742f 786d 6c2c 6170 706c 6963 6174 ext/xml,applicat 0x01c0: 696f 6e2f 786d 6c2c 6170 706c 6963 6174 ion/xml,applicat 0x01d0: 696f 6e2f 7868 746d 6c2b 786d 6c2c 7465 ion/xhtml+xml,te 0x01e0: 7874 2f68 746d 6c3b 713d 302e 392c 7465 xt/html;q=0.9,te 0x01f0: 7874 2f70 6c61 696e 3b71 3d30 2e38 2c69 xt/plain;q=0.8,i 0x0200: 6d61 6765 2f70 6e67 2c2a 2f2a 3b71 3d30 mage/png,*/*;q=0 0x0210: 2e35 131e 4854 5450 5f41 4343 4550 545f .5..HTTP_ACCEPT_ 0x0220: 4348 4152 5345 5449 534f 2d38 3835 392d CHARSETISO-8859- 0x0230: 312c 7574 662d 383b 713d 302e 372c 2a3b 1,utf-8;q=0.7,*; 0x0240: 713d 302e 3714 0e48 5454 505f 4143 4345 q=0.7..HTTP_ACCE 0x0250: 5054 5f4c 414e 4755 4147 4565 6e2d 7573 PT_LANGUAGEen-us 0x0260: 2c65 6e3b 713d 302e 3509 1148 5454 505f ,en;q=0.5..HTTP_ 0x0270: 484f 5354 6d79 7371 6c2e 6c65 6973 696e HOSTmysql.leisin 0x0280: 6b2e 6f72 670f 5a48 5454 505f 5553 4552 k.org.ZHTTP_USER 0x0290: 5f41 4745 4e54 4d6f 7a69 6c6c 612f 352e _AGENTMozilla/5. 0x02a0: 3020 2857 696e 646f 7773 3b20 553b 2057 0.(Windows;.U;.W 0x02b0: 696e 646f 7773 204e 5420 352e 313b 2065 indows.NT.5.1;.e 0x02c0: 6e2d 5553 3b20 7276 3a31 2e38 2e30 2e37 n-US;.rv:1.8.0.7 0x02d0: 2920 4765 636b 6f2f 3230 3036 3039 3039 ).Gecko/20060909 0x02e0: 2046 6972 6566 6f78 2f31 2e35 2e30 2e37 .Firefox/1.5.0.7 0x02f0: 1003 4854 5450 5f52 4554 5552 4e5f 434f ..HTTP_RETURN_CO 0x0300: 4445 3230 300b 8c48 5454 505f 434f 4f4b DE200..HTTP_COOK 0x0310: 4945 706d 615f 6c61 6e67 3d65 6e2d 6973 IEpma_lang=en-is 0x0320: 6f2d 3838 3539 2d31 3b20 706d 615f 6368 o-8859-1;.pma_ch 0x0330: 6172 7365 743d 6973 6f2d 3838 3539 2d31 arset=iso-8859-1 0x0340: 3b20 706d 615f 636f 6f6b 6965 5f75 7365 ;.pma_cookie_use 0x0350: 726e 616d 652d 313d 7763 6b47 4677 3875 rname-1=wckGFw8u 0x0360: 4879 5453 7a77 6358 3875 4e30 6367 2533 HyTSzwcX8uN0cg%3 0x0370: 4425 3344 3b20 706d 615f 636f 6c6c 6174 D%3D;.pma_collat 0x0380: 696f 6e5f 636f 6e6e 6563 7469 6f6e 3d75 ion_connection=u 0x0390: 7466 385f 756e 6963 6f64 655f 6369 0104 tf8_unicode_ci.. 0x03a0: 0001 0000 0000 ...... 09:01:20.193354 IP localhost.localdomain.2345 > localhost.localdomain.42965: . ack 883 win 32767 <nop,nop,timestamp 921071067 921071067> 0x0000: 4500 0034 871b 4000 4006 b5a6 7f00 0001 E..4..@.@....... 0x0010: 7f00 0001 0929 a7d5 34ce eac0 33eb 2f2b .....)..4...3./+ 0x0020: 8010 7fff 7b94 0000 0101 080a 36e6 6ddb ....{.......6.m. 0x0030: 36e6 6ddb 6.m. 09:01:20.194597 IP localhost.localdomain.2345 > localhost.localdomain.42965: R 1:1(0) ack 883 win 32767 <nop,nop,timestamp 921071067 921071067> 0x0000: 4500 0034 871c 4000 4006 b5a5 7f00 0001 E..4..@.@....... 0x0010: 7f00 0001 0929 a7d5 34ce eac0 33eb 2f2b .....)..4...3./+ 0x0020: 8014 7fff 7b90 0000 0101 080a 36e6 6ddb ....{.......6.m. 0x0030: 36e6 6ddb 6.m. Previous Comments: ------------------------------------------------------------------------ [2006-10-07 07:03:02] hugo at leisink dot net Here is the tcpdump output for a working site (created myself) 09:01:09.578644 IP localhost.localdomain.44604 > localhost.localdomain.2345: S 861441178:861441178(0) win 32767 <mss 16396,sackOK,timestamp 921070006 0,nop,wscale 0> 0x0000: 4500 003c e52c 4000 4006 578d 7f00 0001 E..<.,@.@.W..... 0x0010: 7f00 0001 ae3c 0929 3358 8c9a 0000 0000 .....<.)3X...... 0x0020: a002 7fff 77b8 0000 0204 400c 0402 080a ....w.....@..... 0x0030: 36e6 69b6 0000 0000 0103 0300 6.i......... 09:01:09.578672 IP localhost.localdomain.2345 > localhost.localdomain.44604: S 875467929:875467929(0) ack 861441179 win 32767 <mss 16396,sackOK,timestamp 921070006 921070006,nop,wscale 0> 0x0000: 4500 003c 0000 4000 4006 3cba 7f00 0001 E..<..@.@.<..... 0x0010: 7f00 0001 0929 ae3c 342e 9499 3358 8c9b .....).<4...3X.. 0x0020: a012 7fff 0e43 0000 0204 400c 0402 080a .....C....@..... 0x0030: 36e6 69b6 36e6 69b6 0103 0300 6.i.6.i..... 09:01:09.578698 IP localhost.localdomain.44604 > localhost.localdomain.2345: . ack 1 win 32767 <nop,nop,timestamp 921070006 921070006> 0x0000: 4500 0034 e52d 4000 4006 5794 7f00 0001 E..4.-@.@.W..... 0x0010: 7f00 0001 ae3c 0929 3358 8c9b 342e 949a .....<.)3X..4... 0x0020: 8010 7fff 7760 0000 0101 080a 36e6 69b6 ....w`......6.i. 0x0030: 36e6 69b6 6.i. 09:01:09.579438 IP localhost.localdomain.44604 > localhost.localdomain.2345: P 1:819(818) ack 1 win 32767 <nop,nop,timestamp 921070006 921070006> 0x0000: 4500 0366 e52e 4000 4006 5461 7f00 0001 E..f..@.@.Ta.... 0x0010: 7f00 0001 ae3c 0929 3358 8c9b 342e 949a .....<.)3X..4... 0x0020: 8018 7fff 9863 0000 0101 080a 36e6 69b6 .....c......6.i. 0x0030: 36e6 69b6 0101 0001 0008 0000 0001 0000 6.i............. 0x0040: 0000 0000 0104 0001 0312 0000 1107 4741 ..............GA 0x0050: 5445 5741 595f 494e 5445 5246 4143 4543 TEWAY_INTERFACEC 0x0060: 4749 2f31 2e31 0d26 444f 4355 4d45 4e54 GI/1.1.&DOCUMENT 0x0070: 5f52 4f4f 542f 686f 6d65 2f77 6562 7369 _ROOT/home/websi 0x0080: 7465 732f 6c65 6973 696e 6b2f 7072 6f6a tes/leisink/proj 0x0090: 6563 7473 2f70 7562 6c69 630e 0352 4551 ects/public..REQ 0x00a0: 5545 5354 5f4d 4554 484f 4447 4554 0b01 UEST_METHODGET.. 0x00b0: 5245 5155 4553 545f 5552 492f 0b0a 5343 REQUEST_URI/..SC 0x00c0: 5249 5054 5f4e 414d 452f 696e 6465 782e RIPT_NAME/index. 0x00d0: 7068 700f 3053 4352 4950 545f 4649 4c45 php.0SCRIPT_FILE 0x00e0: 4e41 4d45 2f68 6f6d 652f 7765 6273 6974 NAME/home/websit 0x00f0: 6573 2f6c 6569 7369 6e6b 2f70 726f 6a65 es/leisink/proje 0x0100: 6374 732f 7075 626c 6963 2f69 6e64 6578 cts/public/index 0x0110: 2e70 6870 0b08 5245 4d4f 5445 5f41 4444 .php..REMOTE_ADD 0x0120: 5231 302e 342e 302e 320b 0253 4552 5645 R10.4.0.2..SERVE 0x0130: 525f 504f 5254 3830 0b14 5345 5256 4552 R_PORT80..SERVER 0x0140: 5f4e 414d 4570 726f 6a65 6374 732e 6c65 _NAMEprojects.le 0x0150: 6973 696e 6b2e 6f72 670f 0853 4552 5645 isink.org..SERVE 0x0160: 525f 5052 4f54 4f43 4f4c 4854 5450 2f31 R_PROTOCOLHTTP/1 0x0170: 2e31 0f0d 5345 5256 4552 5f53 4f46 5457 .1..SERVER_SOFTW 0x0180: 4152 4548 6961 7761 7468 6120 7635 2e30 AREHiawatha.v5.0 0x0190: 0f03 5245 4449 5245 4354 5f53 5441 5455 ..REDIRECT_STATU 0x01a0: 5332 3030 0f05 434f 4e4e 4543 5449 4f4e S200..CONNECTION 0x01b0: 5f54 5950 4570 6c61 696e 0b63 4854 5450 _TYPEplain.cHTTP 0x01c0: 5f41 4343 4550 5474 6578 742f 786d 6c2c _ACCEPTtext/xml, 0x01d0: 6170 706c 6963 6174 696f 6e2f 786d 6c2c application/xml, 0x01e0: 6170 706c 6963 6174 696f 6e2f 7868 746d application/xhtm 0x01f0: 6c2b 786d 6c2c 7465 7874 2f68 746d 6c3b l+xml,text/html; 0x0200: 713d 302e 392c 7465 7874 2f70 6c61 696e q=0.9,text/plain 0x0210: 3b71 3d30 2e38 2c69 6d61 6765 2f70 6e67 ;q=0.8,image/png 0x0220: 2c2a 2f2a 3b71 3d30 2e35 131e 4854 5450 ,*/*;q=0.5..HTTP 0x0230: 5f41 4343 4550 545f 4348 4152 5345 5449 _ACCEPT_CHARSETI 0x0240: 534f 2d38 3835 392d 312c 7574 662d 383b SO-8859-1,utf-8; 0x0250: 713d 302e 372c 2a3b 713d 302e 3714 0e48 q=0.7,*;q=0.7..H 0x0260: 5454 505f 4143 4345 5054 5f4c 414e 4755 TTP_ACCEPT_LANGU 0x0270: 4147 4565 6e2d 7573 2c65 6e3b 713d 302e AGEen-us,en;q=0. 0x0280: 3509 1448 5454 505f 484f 5354 7072 6f6a 5..HTTP_HOSTproj 0x0290: 6563 7473 2e6c 6569 7369 6e6b 2e6f 7267 ects.leisink.org 0x02a0: 0f5a 4854 5450 5f55 5345 525f 4147 454e .ZHTTP_USER_AGEN 0x02b0: 544d 6f7a 696c 6c61 2f35 2e30 2028 5769 TMozilla/5.0.(Wi 0x02c0: 6e64 6f77 733b 2055 3b20 5769 6e64 6f77 ndows;.U;.Window 0x02d0: 7320 4e54 2035 2e31 3b20 656e 2d55 533b s.NT.5.1;.en-US; 0x02e0: 2072 763a 312e 382e 302e 3729 2047 6563 .rv:1.8.0.7).Gec 0x02f0: 6b6f 2f32 3030 3630 3930 3920 4669 7265 ko/20060909.Fire 0x0300: 666f 782f 312e 352e 302e 3710 0348 5454 fox/1.5.0.7..HTT 0x0310: 505f 5245 5455 524e 5f43 4f44 4532 3030 P_RETURN_CODE200 0x0320: 0b31 4854 5450 5f43 4f4f 4b49 4557 6562 .1HTTP_COOKIEWeb 0x0330: 7369 7465 5365 7373 696f 6e49 443d 3134 siteSessionID=14 0x0340: 3539 6130 3837 3362 3264 6335 6362 6637 59a0873b2dc5cbf7 0x0350: 6533 3534 6536 3636 6334 3464 3936 0104 e354e666c44d96.. 0x0360: 0001 0000 0000 ...... 09:01:09.579463 IP localhost.localdomain.2345 > localhost.localdomain.44604: . ack 819 win 32767 <nop,nop,timestamp 921070006 921070006> 0x0000: 4500 0034 fd2c 4000 4006 3f95 7f00 0001 E..4.,@.@.?..... 0x0010: 7f00 0001 0929 ae3c 342e 949a 3358 8fcd .....).<4...3X.. 0x0020: 8010 7fff 742e 0000 0101 080a 36e6 69b6 ....t.......6.i. 0x0030: 36e6 69b6 6.i. 09:01:09.590361 IP localhost.localdomain.2345 > localhost.localdomain.44604: P 1:3369(3368) ack 819 win 32767 <nop,nop,timestamp 921070007 921070006> 0x0000: 4500 0d5c fd2d 4000 4006 326c 7f00 0001 E..\.-@.@.2l.... 0x0010: 7f00 0001 0929 ae3c 342e 949a 3358 8fcd .....).<4...3X.. 0x0020: 8018 7fff da96 0000 0101 080a 36e6 69b7 ............6.i. 0x0030: 36e6 69b6 0106 0001 0d0b 0500 582d 506f 6.i.........X-Po 0x0040: 7765 7265 642d 4279 3a20 5048 502f 352e wered-By:.PHP/5. 0x0050: 312e 362d 302e 646f 7464 6562 2e32 0d0a 1.6-0.dotdeb.2.. 0x0060: 4578 7069 7265 733a 2054 6875 2c20 3139 Expires:.Thu,.19 0x0070: 204e 6f76 2031 3938 3120 3038 3a35 323a .Nov.1981.08:52: 0x0080: 3030 2047 4d54 0d0a 4361 6368 652d 436f 00.GMT..Cache-Co 0x0090: 6e74 726f 6c3a 206e 6f2d 7374 6f72 652c ntrol:.no-store, 0x00a0: 206e 6f2d 6361 6368 652c 206d 7573 742d .no-cache,.must- 0x00b0: 7265 7661 6c69 6461 7465 2c20 706f 7374 revalidate,.post 0x00c0: 2d63 6865 636b 3d30 2c20 7072 652d 6368 -check=0,.pre-ch 0x00d0: 6563 6b3d 300d 0a50 7261 676d 613a 206e eck=0..Pragma:.n 0x00e0: 6f2d 6361 6368 650d 0a43 6f6e 7465 6e74 o-cache..Content 0x00f0: 2d74 7970 653a 2074 6578 742f 6874 6d6c -type:.text/html 0x0100: 0d0a 0d0a 3c68 746d 6c3e 0a0a 3c68 6561 ....<html>..<hea ...<lots of HTML output>... 0x0d30: 2f64 6976 3e0a 3c2f 626f 6479 3e0a 0a3c /div>.</body>..< 0x0d40: 2f68 746d 6c3e 0a00 0000 0000 0103 0001 /html>.......... 0x0d50: 0008 0000 0000 0000 0000 0000 ............ 09:01:09.590409 IP localhost.localdomain.44604 > localhost.localdomain.2345: . ack 3369 win 47152 <nop,nop,timestamp 921070007 921070007> 0x0000: 4500 0034 e52f 4000 4006 5792 7f00 0001 E..4./@.@.W..... 0x0010: 7f00 0001 ae3c 0929 3358 8fcd 342e a1c2 .....<.)3X..4... 0x0020: 8010 b830 2ed3 0000 0101 080a 36e6 69b7 ...0........6.i. 0x0030: 36e6 69b7 6.i. 09:01:09.590476 IP localhost.localdomain.2345 > localhost.localdomain.44604: F 3369:3369(0) ack 819 win 32767 <nop,nop,timestamp 921070007 921070007> 0x0000: 4500 0034 fd2e 4000 4006 3f93 7f00 0001 E..4..@.@.?..... 0x0010: 7f00 0001 0929 ae3c 342e a1c2 3358 8fcd .....).<4...3X.. 0x0020: 8011 7fff 6703 0000 0101 080a 36e6 69b7 ....g.......6.i. 0x0030: 36e6 69b7 6.i. 09:01:09.593134 IP localhost.localdomain.44604 > localhost.localdomain.2345: P 819:827(8) ack 3370 win 47152 <nop,nop,timestamp 921070007 921070007> 0x0000: 4500 003c e530 4000 4006 5789 7f00 0001 E..<.0@.@.W..... 0x0010: 7f00 0001 ae3c 0929 3358 8fcd 342e a1c3 .....<.)3X..4... 0x0020: 8018 b830 2dbc 0000 0101 080a 36e6 69b7 ...0-.......6.i. 0x0030: 36e6 69b7 0105 0001 0000 0000 6.i......... 09:01:09.593730 IP localhost.localdomain.44604 > localhost.localdomain.2345: R 827:827(0) ack 3370 win 47152 <nop,nop,timestamp 921070007 921070007> 0x0000: 4500 0034 e531 4000 4006 5790 7f00 0001 E..4.1@.@.W..... 0x0010: 7f00 0001 ae3c 0929 3358 8fd5 342e a1c3 .....<.)3X..4... 0x0020: 8014 b830 2ec6 0000 0101 080a 36e6 69b7 ...0........6.i. 0x0030: 36e6 69b7 6.i. ------------------------------------------------------------------------ [2006-10-07 06:50:38] hugo at leisink dot net New problem: for some of my sites, I got FastCGI working. For some sites not. PHP dumps a 200MB core file in /tmp. I think we really got a crash here. ------------------------------------------------------------------------ [2006-10-03 12:25:40] hugo at leisink dot net Ok, I've got something interesting. I've been digging through the source and found the statement PHP_FCGI_MAX_REQUESTS. I've found the file /sapi/cgi/README.FastCGI, which says some things about the environment settings PHP_FCGI_CHILDREN and PHP_FCGI_MAX_REQUESTS. I'm running PHP now with 5 children and everything looks oke (Don't close this bugreport yet, please. Wanna do some more tests first). It even survived several stresstests with 'ab'. But now I have this question: Why is this important (read: necessary) information NOT in the manualpage!?!?! ------------------------------------------------------------------------ [2006-10-03 11:19:50] hugo at leisink dot net 5.2.0RC5-dev also quits/crashes. I agree that Valgrind doesn't show any crash. But the result is the same: PHP stops running. I'm trying real hard to find out what is happing or what causes PHP to quit/crash. It looks like it's random. Somethings it stops after 100 requests, somethings after 5000. I'm using Debian sarge, which comes with PHP 4.3.10. This version has the same problem. I'm writing my own webserver and I'm now implementing FastCGI support. So, it is possible that my webserver doesn't send the right FastCGI commands/record information. But if so, it shouldn't make PHP to stop running. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/39020 -- Edit this bug report at http://bugs.php.net/?id=39020&edit=1