#22213 [NEW]: Apache mod_ssl + PHP + cURL SSL segfault

From: Date: Thu, 13 Feb 2003 21:56:40 +0000
Subject: #22213 [NEW]: Apache mod_ssl + PHP + cURL SSL segfault
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-33086@lists.php.net to get a copy of this message 
From:             alan@pair.com
Operating system: FreeBSD 4.6-STABLE
PHP version:      4CVS-2003-02-13 (stable)
PHP Bug Type:     cURL related
Bug description:  Apache mod_ssl + PHP + cURL SSL segfault

I've reproduced this bug with PHP versions 4.2.2, and the STABLE PHP dated
Feb 13, 2003. 

FreeBSD 4.6-stable
PHP 4.2.2 --with-curl
curl --with-ssl, versions 7.9.8 and 7.10.3
Apache 1.3.27 mod_ssl
OpenSSL 0.9.7, and a variety of flavors of 0.9.6.

To reproduce the bug:
* start apache
* send a HUP signal to apache's parent process (to restart it)

The server needn't serve any pages (php or otherwise) before the HUP is
sent.  Apache crashes, I believe while trying to reinitialize the mod_ssl
module.

Running the same version of everything, but curl compiled --without-ssl
makes it work correctly: the apache parent kills off its children and
spawns new ones without the parent segfaulting.

It seems to be dying inside SSL_CTX_ctrl (via SSL_CTX_set_options) when
called from apache's ssl_init_ConfigureServer, at this line:

SSL_CTX_set_options(ctx, SSL_OP_ALL);

Unfortunately, by the time it segfaults, the stack has been corrupted, and
it gets really difficult to debug.

Alan



-- 
Edit bug report at http://bugs.php.net/?id=22213&edit=1
-- 
Try a CVS snapshot:         http://bugs.php.net/fix.php?id=22213&r=trysnapshot
Fixed in CVS:               http://bugs.php.net/fix.php?id=22213&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=22213&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=22213&r=needtrace
Try newer version:          http://bugs.php.net/fix.php?id=22213&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=22213&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=22213&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=22213&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=22213&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=22213&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=22213&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=22213&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=22213&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=22213&r=gnused

Thread (14 messages)

« previous php.bugs (#33086) next »