#47768 [NEW]: httpd ( Apache 2.2 ) crashes of abort() in signal handler

From: hossy421 at yahoo dot co dot jp Operating system: FreeBSD 6.3-RELEASE-p9 PHP version: 5.2.9 PHP Bug Type: Apache2 related Bug description: httpd ( Apache 2.2 ) crashes of abort() in signal handler Description: ------------ httpd ( Apache 2.2 ) crashes below messages. > httpd in free(): error: recursive call > [notice] child pid XXXXX exit signal Abort trap (6) XXXXX is process id of a httpd child process. Reproduce code: --------------- sorry, I could't repro this bug in another environment. Actual result: -------------- this is backtrace. Program received signal SIGABRT, Aborted. 0x2836b56f in kill () from /lib/libc.so.6 (gdb) bt #0 0x2836b56f in kill () from /lib/libc.so.6 #1 0x2828d27b in raise () from /usr/lib/libpthread.so.2 #2 0x2836a2ab in abort () from /lib/libc.so.6 : #6 0x2830662c in free () from /lib/libc.so.6 #7 0x28617828 in php_error_cb (type=1, error_filename=0x86b1e38 "/usr/home/hossy/public_html/test.php", error_lineno=391, format=0x2874febc "Maximum execution time of %d second%s exceeded", args=0xbfbf7898 "\n") at /usr/ports/lang/php5/work/php-5.2.9/main/main.c:824 : #10 0x282920d3 in sigaction () from /usr/lib/libpthread.so.2 #11 <signal handler called> : #15 0x2830662c in free () from /lib/libc.so.6 #16 0x28644cb5 in zend_mm_mem_malloc_free (storage=0x80a1690, ptr=0xa81c000) at /usr/ports/lang/php5/work/php-5.2.9/Zend/zend_alloc.c:276 : 1. httpd cought SIGPROF in free() because of `max_execution_time' parameter. 2. php_error_cb() called free() 3. free() detected as `recursive call.' in zend_mm_mem_malloc_free(), signal is blocked from HANDLE_BLOCK_INTERRUPTIONS macro. but, apache2handler does't have the function for it. (gdb) p zend_block_interruptions $1 = (void (*)(void)) 0 (gdb) p sapi_module $2 = {name = 0x28759d5d "apache2handler", pretty_name = 0x28759d6c "Apache 2.0 Handler", : block_interruptions = 0, unblock_interruptions = 0, : (gdb) p apache2_sapi_module $3 = {name = 0x28759d5d "apache2handler", pretty_name = 0x28759d6c "Apache 2.0 Handler", : block_interruptions = 0, unblock_interruptions = 0, : in japanese mailing list, I got a patch for this problem. http://ml.php.gr.jp/pipermail/php-dev/2009-March/001453.html -- Edit bug report at http://bugs.php.net/?id=47768&edit=1 -- Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=47768&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=47768&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=47768&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=47768&r=fixedcvs Fixed in CVS and need be documented: http://bugs.php.net/fix.php?id=47768&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=47768&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=47768&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=47768&r=needscript Try newer version: http://bugs.php.net/fix.php?id=47768&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=47768&r=support Expected behavior: http://bugs.php.net/fix.php?id=47768&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=47768&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=47768&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=47768&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=47768&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=47768&r=dst IIS Stability: http://bugs.php.net/fix.php?id=47768&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=47768&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=47768&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=47768&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=47768&r=mysqlcfg