Bug #77430 [Com]: php-fpm crashes with Main process exited, code=dumped, status=11/SEGV

Edit report at https://bugs.php.net/bug.php?id=77430&edit=1 ID: 77430 Comment by: mnikulin at plesk dot com Reported by: claudiu_beta at yahoo dot com Summary: php-fpm crashes with Main process exited, code=dumped, status=11/SEGV Status: Closed Type: Bug Package: FPM related Operating System: Fedora 28 PHP Version: 7.3.1RC1 Assigned To: bukka Block user comment: N Private report: N New Comment: My point was that I can not confirm that provided fix works perfectly. I managed to get a test server with usual time to crash in the range from several seconds to several minutes. Without the fix provided for this bug I get crash in zlog_stream_set_msg_suffix. With the patch I get the crash with the same rate. I am in doubt if failure in zlog_stream_set_msg_suffix is eliminated completely or it is just delayed and corrupted epoll data becomes primary source of failure. Both bugs are annoying enough and not easy to reproduce. I was really surprised when I have got another semi-mysterious crash. I have added some speculations to the Bug #77114. Thank you for the fix, Previous Comments: ------------------------------------------------------------------------ [2019-01-17 18:56:41] bukka@php.net It's merged and will be part of 7.3.2. It's quite difficult to do a test for this but will think about it as it's a bit more generic issue as noted below. @claudiu Thanks for testing! @mnikulin That's a different issue so this fix cannot fix it as it's in completely different place. Will try to take a look on that one later. ------------------------------------------------------------------------ [2019-01-17 18:39:08] bukka@php.net Automatic comment on behalf of bukka Revision: http://git.php.net/?p=php-src.git;a=commit;h=766b4fd5150031878188a03ea77bb9a0f73e4dc5 Log: Fix bug #77430 (php-fpm crashes with Main process exited) ------------------------------------------------------------------------ [2019-01-17 18:37:47] bukka@php.net Automatic comment on behalf of bukka Revision: http://git.php.net/?p=php-src.git;a=commit;h=766b4fd5150031878188a03ea77bb9a0f73e4dc5 Log: Fix bug #77430 (php-fpm crashes with Main process exited) ------------------------------------------------------------------------ [2019-01-17 08:17:38] claudiu_beta at yahoo dot com Thanks to updated, recompiled packages from Remi for Fedora 29, I was able to test the patched version. I can now confirm that the issue is gone. Thank you all! ------------------------------------------------------------------------ [2019-01-17 04:28:58] mnikulin at plesk dot com With the patch "[2019-01-15 20:20 UTC] bukka@php.net" I faced Bug #77114 "php-fpm master segfaults in fpm_event_epoll_wait/fpm_event_fire" I have adjusted configuration of pools to make child exit events frequent enough and provide moderate load to ~30 pools pm.process_idle_timeout = 2s php_value[error_reporting] = 22519 pm.max_requests = 2 (gdb) bt #0 0x0000004200000000 in ?? () #1 0x000000000085c1e0 in fpm_event_fire (ev=0x1ce15b0) at /usr/src/debug/sapi/fpm/fpm/fpm_events.c:465 #2 0x000000000086f4f8 in fpm_event_epoll_wait (queue=0x1cea5a0, timeout=1000) at /usr/src/debug/sapi/fpm/fpm/events/epoll.c:145 #3 0x000000000085bf24 in fpm_event_loop (err=0) at /usr/src/debug/sapi/fpm/fpm/fpm_events.c:409 #4 0x000000000085420f in fpm_run (max_requests=0x7ffcc6873c9c) at /usr/src/debug/sapi/fpm/fpm/fpm.c:113 #5 0x00000000008618e9 in main (argc=2, argv=0x7ffcc6873ed8) at /usr/src/debug/sapi/fpm/fpm/fpm_main.c:1873 (gdb) frame 1 #1 0x000000000085c1e0 in fpm_event_fire (ev=0x1ce15b0) at /usr/src/debug/sapi/fpm/fpm/fpm_events.c:465 465 in /usr/src/debug/sapi/fpm/fpm/fpm_events.c (gdb) p ev $44 = (struct fpm_event_s *) 0x1ce15b0 (gdb) print epollfds[15] $45 = {events = 1, data = {ptr = 0x1ce15b0, fd = 30283184, u32 = 30283184, u64 = 30283184}} (gdb) print *(struct fpm_event_s *)epollfds[14].data.ptr $41 = {fd = 34, timeout = {tv_sec = 0, tv_usec = 0}, frequency = {tv_sec = 0, tv_usec = 0}, callback = 0x864541 <fpm_pctl_on_socket_accept>, arg = 0x1cd40b0, flags = 10, index = 34, which = 2} (gdb) print *(struct fpm_event_s *)epollfds[15].data.ptr $42 = {fd = 0, timeout = {tv_sec = 8822805, tv_usec = 30283040}, frequency = {tv_sec = 356482285570, tv_usec = 2}, callback = 0x4200000000, arg = 0x53, flags = 0, index = 0, which = 0} (gdb) print *(struct fpm_event_s *)epollfds[16].data.ptr $43 = {fd = 124, timeout = {tv_sec = 0, tv_usec = 0}, frequency = {tv_sec = 0, tv_usec = 0}, callback = 0x86a015 <fpm_stdio_child_said>, arg = 0x1ce0dd0, flags = 2, index = 124, which = 2} Callback in epollfds[15].data.ptr (related to fired ev) looks suspicious. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=77430 -- Edit this bug report at https://bugs.php.net/bug.php?id=77430&edit=1