Bug #47640 [Com]: Session does not close file in /tmp/

From: Date: Sun, 27 May 2012 01:04:29 +0000
Subject: Bug #47640 [Com]: Session does not close file in /tmp/
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-170853@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=47640&edit=1

 ID:                 47640
 Comment by:         bugs dot php dot net at jrs-s dot net
 Reported by:        manuel dot schmitt at manitu dot de
 Summary:            Session does not close file in /tmp/
 Status:             Not a bug
 Type:               Bug
 Package:            Session related
 Operating System:   Linux
 PHP Version:        5.2.9
 Block user comment: N
 Private report:     N

 New Comment:

I worked around this problem by simply moving sessions from file storage to 
memcache.

session.save_handler = memcache
session.save_path = "tcp://serv01:11211,tcp://serv02:11211,tcp://serv03:11211"

An application pool that had been creeping up to MaxCli (900 children apiece, in 
this case) within a couple hours of a restart due to this FLOCK issue settled 
down and has now been running happily for several days on fewer than 150 
children per server.  I highly recommend just NOT USING php's file based session 
storage in the first place, because of exactly this issue.


Previous Comments:
------------------------------------------------------------------------
[2012-02-01 19:50:15] pio at rdl dot pl

Hello !

Is there any news with this issue ?

Piotr

------------------------------------------------------------------------
[2010-10-24 12:29:55] alex dot linte at gmail dot com

Hello,

I have the same mistake :

host:~# date
dimanche 24 octobre 2010, 12:10:03 (UTC+0200)
host:~# ps faux | grep php
juritrav 17749  0.0  0.0 118988 11616 ?        S    00:11   0:00  |   \_ /usr/bin/php-cgi
suphpuser 17818  0.0  0.0 117764  9536 ?        S    00:12   0:00  |   \_ /usr/bin/php-cgi
suphpuser 18004  0.0  0.0 117764  9536 ?        S    00:14   0:00  |   \_ /usr/bin/php-cgi
suphpuser 12573  0.0  0.1 138812 31784 ?        S    09:39   0:00  |   \_ /usr/bin/php-cgi
suphpuser 12574  0.0  0.0 117492  9396 ?        S    09:39   0:00  |   \_ /usr/bin/php-cgi
duphpuser 12594  0.0  0.0 117492  9396 ?        S    09:39   0:00  |   \_ /usr/bin/php-cgi
suphpuser 12675  0.0  0.0 117764  9536 ?        S    09:40   0:00  |   \_ /usr/bin/php-cgi
suphpuser 12682  0.0  0.0 117764  9536 ?        S    09:40   0:00  |   \_ /usr/bin/php-cgi
suphpuser 12695  0.0  0.0 117764  9536 ?        S    09:40   0:00  |   \_ /usr/bin/php-cgi

So php-cgi scripts run for ever until I kill its manually.

I take the sample of process 18004 : 


front2:~# strace -p18004
Process 18004 attached - interrupt to quit
flock(3, LOCK_EX


host# lsof -p18004
....
php-cgi 18004 suphpuser    3uW  REG    9,1       7   897723 /tmp/php5/sess_xxxxxxxxxxxxxxxxxxxxxxxx
(deleted)
....

So the php script tries to lock a session file (file descriptor 3) that has been deleted by the PHP
garbage collector.

When the garbage collector delete a session file, it doesn't take care that any php process
still using this session file.
Then the php process can't lock the file because it doesn't exist anymore, the php-cgi
process is blocked....

I have the problem with the following version of php :

PHP 5.2.6-1+lenny9 with Suhosin-Patch 0.9.6.2 (cli) (built: Aug  4 2010 06:06:53)
Copyright (c) 1997-2008 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2008 Zend Technologies
    with Zend Optimizer v3.3.9, Copyright (c) 1998-2009, by Zend Technologies

The cron job for php (script that delete session on debian) is disabled et the garbage collector php
is enabled in php.ini file :

session.gc_probability = 1
session.gc_divisor     = 100


Sorry for my english.

Alexandre LINTE

------------------------------------------------------------------------
[2009-05-03 12:07:47] manuel dot schmitt at manitu dot de

ACK, but as server administrator there *must* be a way to prevent this.

Admins do not have influence on the scripts that are used by webmasters.

So I think it's a PHP thing. Likely one should automatically close all sessions that were
opened by scripts aborting / running into limits sets by php (e.g. exec time) etc. This should solve
it.

------------------------------------------------------------------------
[2009-05-02 18:42:02] jani@php.net

Endless loops tend to cause such problems. One should always use http://www.php.net/session_write_close as early as
possible to prevent 
race conditions and this kind of "bugs".

------------------------------------------------------------------------
[2009-03-17 06:32:36] manuel dot schmitt at manitu dot de

ARGH!

It is so simple!

<?php

session_start();
while (true) { $i *= 2; }

?>

Execute it for the first time and ensure, that it runs into any of the php limits, e.g. maxmimum
execution time.

Call the script a second time while not running into the limit. When tracing the PHP process you
will see an unlimited flock() syscall!

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=47640


-- 
Edit this bug report at https://bugs.php.net/bug.php?id=47640&edit=1


Thread (22 messages)

« previous php.bugs (#170853) next »