#42059 [Bgs]: Since some days php 5.2.4-dev does not work on fedora
ID: 42059
User updated by: spam2 at rhsoft dot net
Reported By: spam2 at rhsoft dot net
Status: Bogus
Bug Type: Apache2 related
Operating System: Fedora 7
PHP Version: 5CVS-2007-07-21 (snap)
New Comment:
That's not a bug but a bug that was fixed. (CVE-2007-3378)
----
Should this be a joke?
THIS IS a bug!
The session-save-apth HAS NOT to be in openbase-dir and a failed
session_start() has not to kill a script.
So there has to be started a session and not display warning nor error!
Previous Comments:
------------------------------------------------------------------------
[2007-07-22 21:47:37] jani@php.net
That's not a bug but a bug that was fixed. (CVE-2007-3378)
------------------------------------------------------------------------
[2007-07-22 16:53:50] spam2 at rhsoft dot net
I found the problem!
<?php
phpinfo();
?>
works
<?php
session_start();
phpinfo();
?>
brings
Warning: session_start() [function.session-start.php]: open_basedir
restriction in effect. File(/var/www/sessiondata) is not within the
allowed path(s):
(/mnt/data/www/www.rhsoft.net:/mnt/data/www/phpincludes:/usr/share/pear:/var/www/uploadtemp)
in /mnt/data/www/www.rhsoft.net/test.php on line 2
Fatal error: session_start() [<a
href='http://at.php.net/manual/de/function.session-start.php'>function.session-start.php</a>]:
Failed to initialize storage module: files (path: /var/www/sessiondata)
in /mnt/data/www/www.rhsoft.net/test.php on line 2
It was invisible because in my central library with autoloading and
much functions there is a @session_start(); to dont show warnings if
anyone has startet a session oder sendt headers before including
Its the same with the last snapshot
On a other machine a snapshot from 08.07.2007 i think does without
troubles
------------------------------------------------------------------------
[2007-07-21 16:13:58] jani@php.net
And shouldn't you stop apache before doing 'make install' ?
Anyway, then run apache like this:
# gdb --arg httpd -X
(gdb) run
Try access a page and see if it crashes..
------------------------------------------------------------------------
[2007-07-21 16:12:02] jani@php.net
Try building with this configure line instead (and do not set any
cflags/etc):
# rm config.cache && ./configure --with-apxs2 --disable-all
--enable-debug
------------------------------------------------------------------------
[2007-07-21 13:17:05] spam2 at rhsoft dot net
Description:
------------
Since some days the snapshot-builds from source under fedora 7 does
produce a white page with HTTP-Status 500 and without any messages in
logfiles.
I have built it every second day and now it will not run, the cli semms
to work normal
If i use the 5.2.3-sources with the same build--script all works
perfect
Reproduce code:
---------------
export CFLAGS="-O3 -march=i686 -mcpu=i686 -mtune=i686 -mmmx -msse3
-fopenmp"
export CXX=gcc
export CXXFLAGS="-O3 -march=i686 -mcpu=i686 -mtune=i686 -mmmx -msse3
-fopenmp"
export PHP_PREFIX="/usr"
# In den Source-Folder wechseln
cd /data/development/src/php/
# Config-Cache falls vorhanden entfernen und aufräumen um Probleme zu
vermeiden
rm -f ./config.cache > /dev/null
make clean > /dev/null
# Configure-Optionen setzen
./configure \
--with-apxs2=/usr/sbin/apxs \
--with-pear=/usr/share/pear \
--build=i686-redhat-linux-gnu \
--host=i686-redhat-linux-gnu \
--target=i686-redhat-linux-gnu \
--prefix=$PHP_PREFIX \
--sysconfdir=/etc \
--localstatedir=/var \
--disable-debug \
--disable-rpath \
--disable-ipv6 \
--disable-dba \
--without-odbc \
--without-unixODBC \
--without-gdbm \
--enable-inline-optimization \
--enable-exif \
--enable-ftp \
--enable-sockets \
--enable-yp \
--enable-wddx \
--enable-memory-limit \
--enable-calendar \
--enable-mbstring \
--enable-soap \
--enable-bcmath \
--enable-gd-native-ttf \
--enable-zip \
--with-readline \
--with-libdir=lib \
--with-config-file-path=/etc \
--with-exec-dir=/usr/bin \
--with-freetype-dir=/usr \
--with-png-dir=/usr \
--with-jpeg-dir=/usr \
--with-expat-dir=/usr \
--with-pcre-regex=/usr \
--with-libxml-dir=/usr \
--with-mysql=/usr/local/mysql \
--with-mysql-sock=/var/lib/mysql \
--with-mysqli \
--with-curl \
--with-gettext \
--with-iconv \
--with-openssl \
--with-png \
--with-bz2 \
--with-zlib \
--with-layout=GNU \
--with-xml \
--with-xmlrpc \
--with-mssql \
--with-pgsql \
--with-pdo-mysql \
--with-pdo-pgsql \
--with-pdo-sqlite \
--with-tidy \
--with-mcrypt \
--with-mhash \
--with-gd \
--with-ttf \
--with-kerberos \
--with-ldap \
--with-imap \
--with-imap-ssl \
&& make \
&& strip .libs/libphp5.so \
&& strip sapi/cli/php \
&& sudo make install \
&& sudo /sbin/service httpd restart
# Aufräumen
make clean > /dev/null
rm -f ./config.cache > /dev/null
Expected result:
----------------
a running apache-module
Actual result:
--------------
a white page
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=42059&edit=1
Thread (6 messages)