#19919 [Fbk->Ctl]: segmentation violation in sapi_apache_header_handler, mod_php4.c line 208

ID: 19919 Updated by: sniper@php.net Reported By: dperham at wgate dot com -Status: Feedback +Status: Critical Bug Type: Reproducible crash Operating System: FreeBSD 4.7 PHP Version: 4.2.3, 4.3.0-Dev Previous Comments: ------------------------------------------------------------------------ [2003-02-23 18:48:32] sniper@php.net Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip ------------------------------------------------------------------------ [2002-11-25 08:42:48] imajes@php.net shade@chemlab.org: are you seeing this core, or are you seeing random cores on high process usage? ------------------------------------------------------------------------ [2002-11-11 14:57:41] shade at chemlab dot org i'm experiencing this issue on solaris 8. under high load apache cores every few minutes. processes seem to run away with the cpu and memory for a few minutes before coring. ------------------------------------------------------------------------ [2002-11-01 05:43:44] mbr at freebsd dot org Hi all, I see this happen here too ... Also FreeBSD 4.7 and PHP from cvs ... ------------------------------------------------------------------------ [2002-10-21 15:20:22] dperham at wgate dot com Still core dumps using the latest snapshot. PHP Version 4.3.0-dev System FreeBSD Server-0-2. 4.7-STABLE FreeBSD 4.7-STABLE #27: Mon Oct i386 Build Date Oct 17 2002 13:19:31 Configure './configure' '--with-apxs=/usr/local/sbin/apxs' Command '--with-config-file-path=/usr/local/etc' '--enable-versioning' '--with-regex=system' '--without-gd' '--without-mysql' '--enable-debug' '--with-imap' '--with-pgsql' '--with-gettext' '--enable-track-vars' '--enable-wddx' '--disable-magic-quotes' '--enable-short-tags' '--enable-debug' '--with-zlib' '--with-imap=/usr/local' '--with-pgsql=/usr/local' '--enable-wddx' '--with-gettext=/usr/local' '--enable-sockets' '--enable-trans-sid' '--with-expat-dir=/ usr/local' '--prefix=/usr/local' 'i386-portbld-freebsd4.7' Server API Apache Virtual disabled Directory Support Configuration /usr/local/www/data/php.ini File (php.ini) Path PHP API 20020307 PHP Extension 20020429 Zend 20021010 Extension Debug Build yes Thread Safety disabled Registered php, http, ftp, compress.zlib PHP Streams ---------------------------------------------------------------------- Date: Mon, 21 Oct 2002 15:57:02 GMT Core was generated by `httpd'. Program terminated with signal 11, Segmentation fault. #0 0x28309a83 in sapi_apache_header_handler (sapi_header=0xbfbfe3c0, sapi_headers=0x2836f510) at /home/wgate/mod_php4/work/php4-200210160300/sapi/apache/mod_php4.c:188 #0 0x28309a83 in sapi_apache_header_handler (sapi_header=0xbfbfe3c0, sapi_headers=0x2836f510) at /home/wgate/mod_php4/work/php4-200210160300/sapi/apache/mod_php4.c:188 #1 0x282c88dd in sapi_header_op (op=SAPI_HEADER_ADD, arg=0xbfbfe410) at /home/wgate/mod_php4/work/php4-200210160300/main/SAPI.c:629 #2 0x2827cd09 in php_setcookie (name=0x824d564 "TICS0", name_len=5, value=0x82e7024 "TG9naW58YToxMzp7czo1OiJCb3hJRCI7czoxMjoiMDAwMDAwMDAyNzI4IjtzOjc6IkJveFR5cGUiO3M6MToiNCI7czoxMzoiQ2hhbm5lbE51bWJlciI7czoxOiIwIjtzOjQ6Ik5vZGUiO3M6MToiMCI7czo5OiJTZXNzaW9uSUQiO3M6MTY6IjJNMVZFRlEwVVI4OFBF"..., value_len=2200, expires=0, path=0x824d724 "/", path_len=1, domain=0x824d6a4 "", domain_len=0, secure=0) at /home/wgate/mod_php4/work/php4-200210160300/ext/standard/head.c:133 #3 0x2827cdcf in zif_setcookie (ht=5, return_value=0x8220f64, this_ptr=0x0, return_value_used=0) at /home/wgate/mod_php4/work/php4-200210160300/ext/standard/head.c:155 #4 0x28302338 in execute (op_array=0x81b6c80) at /home/wgate/mod_php4/work/php4-200210160300/Zend/zend_execute.c:1599 #5 0x282e581b in call_user_function_ex (function_table=0x80cef00, object_pp=0x0, function_name=0x81c2964, retval_ptr_ptr=0xbfbff1b8, param_count=2, params=0x824d924, no_separation=1, symbol_table=0x0) at /home/wgate/mod_php4/work/php4-200210160300/Zend/zend_execute_API.c:561 #6 0x282e50e4 in call_user_function (function_table=0x80cef00, object_pp=0x0, function_name=0x81c2964, retval_ptr=0x82c3c24, param_count=2, params=0xbfbff234) at /home/wgate/mod_php4/work/php4-200210160300/Zend/zend_execute_API.c:403 #7 0x282550a3 in ps_call_handler (func=0x81c2964, argc=2, argv=0xbfbff234) at /home/wgate/mod_php4/work/php4-200210160300/ext/session/mod_user.c:60 #8 0x2825550c in ps_write_user (mod_data=0x2836e570, key=0x81fc2a4 "10a5228266dd083119c5df2c9d5f0518", val=0x80b2024 "Login|a:13:{s:5:\"BoxID\";s:12:\"000000002728\";s:7:\"BoxType\";s:1:\"4\";s:13:\"ChannelNumber\";s:1:\"0\";s:4:\"Node\";s:1:\"0\";s:9:\"SessionID\";s:16:\"2M1VEFQ0UR88PE0R\";s:9:\"LoginType\";s:2:\"WG\";s:6:\"TocsIP\";s:17:\"17"..., vallen=1650) at /home/wgate/mod_php4/work/php4-200210160300/ext/session/mod_user.c:148 #9 0x28251b2c in php_session_save_current_state () at /home/wgate/mod_php4/work/php4-200210160300/ext/session/session.c:676 #10 0x282544e9 in php_session_flush () at /home/wgate/mod_php4/work/php4-200210160300/ext/session/session.c:1553 #11 0x2825450c in zif_session_write_close (ht=0, return_value=0x82083a4, this_ptr=0x0, return_value_used=0) at /home/wgate/mod_php4/work/php4-200210160300/ext/session/session.c:1562 #12 0x28302338 in execute (op_array=0x81b6e80) at /home/wgate/mod_php4/work/php4-200210160300/Zend/zend_execute.c:1599 #13 0x282e581b in call_user_function_ex (function_table=0x80cef00, object_pp=0x0, function_name=0x8208be4, retval_ptr_ptr=0xbfbff760, param_count=2, params=0xbfbff768, no_separation=1, symbol_table=0x0) at /home/wgate/mod_php4/work/php4-200210160300/Zend/zend_execute_API.c:561 #14 0x282d1865 in php_end_ob_buffer (send_buffer=1 '\001', just_flush=0 '\000') at /home/wgate/mod_php4/work/php4-200210160300/main/output.c:238 #15 0x282d1c0b in php_end_ob_buffers (send_buffer=1) at /home/wgate/mod_php4/work/php4-200210160300/main/output.c:332 #16 0x282c297a in php_request_shutdown (dummy=0x0) at /home/wgate/mod_php4/work/php4-200210160300/main/main.c:889 #17 0x28309d3b in php_apache_request_shutdown (dummy=0x0) at /home/wgate/mod_php4/work/php4-200210160300/sapi/apache/mod_php4.c:298 #18 0x805008e in run_cleanups () #19 0x804f11f in ap_clear_pool () #20 0x804f180 in ap_destroy_pool () #21 0x804f10b in ap_clear_pool () #22 0x805a99a in child_main () #23 0x805af91 in make_child () #24 0x805b200 in perform_idle_server_maintenance () #25 0x805b6ad in standalone_main () #26 0x805bbdf in main () #27 0x804eb91 in _start () ------------------------------------------------------------------------------ (gdb) down #0 0x28309a83 in sapi_apache_header_handler (sapi_header=0xbfbfe3c0, sapi_headers=0x2836f510) at /home/wgate/mod_php4/work/php4-200210160300/sapi/apache/mod_php4.c:188 188 table_add(r->headers_out, header_name, header_content); (gdb) p r $2 = (request_rec *) 0x0 ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/19919 -- Edit this bug report at http://bugs.php.net/?id=19919&edit=1