#31212 [Opn->Fbk]: Crash related to php_session_start and configuration
| From: | tony2001@php.net | Date: | Tue, 21 Dec 2004 09:20:08 +0000 |
| Subject: | #31212 [Opn->Fbk]: Crash related to php_session_start and configuration | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-70811@lists.php.net to get a copy of this message | ||
ID: 31212
Updated by: tony2001@php.net
Reported By: jibe at sdf dot lonestar dot org
-Status: Open
+Status: Feedback
Bug Type: Session related
Operating System: FreeBSD 5.2.1
PHP Version: 4.3.10
New Comment:
Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php
If you can provide more information, feel free to add it
to this bug and change the status back to "Open".
Thank you for your interest in PHP.
Previous Comments:
------------------------------------------------------------------------
[2004-12-20 23:35:27] jibe at sdf dot lonestar dot org
Description:
------------
hi gang,
using the "session" extension was crashing apache here, making drupal
and other software unusable.
With session.save_handler set to "user" in php.ini, I can
see that "save_path" arrives as 0x0 in "ps_open_user" in
mod_user, and apache crashes.
My fix for now is to hardcode this
PS(save_path) = malloc(strlen("/tmp/") + 1);
strcpy(PS(save_path), "/tmp/");
in session.c, and things work fine. Unfortunately I have
no expertise to track this bug much more.
Cheers!
Reproduce code:
---------------
Use drupal..
Expected result:
----------------
Apache crashes, and your dmesg is full of
[...]
pid 99709 (httpd), uid 80: exited on signal 11
[...]
Actual result:
--------------
Attaching httpd with gdb (session module compiled in debug
mode):
(gdb)
(gdb) continue
Continuing.
Program received signal SIGSEGV, Segmentation fault.
0x2906b8bf in ps_open_user (mod_data=0xffffff00, save_path=0x0,
session_name=0x85b12ac "POSTNUKESID")
at
/usr/ports/www/php4-session/work/php-4.3.10/ext/session/mod_user.c:95
95 SESS_ZVAL_STRING(save_path, args[0]);
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=31212&edit=1