PHP 4.0 Bug #3508: apache crashes with php

From: k@les.cz Operating system: RedHat 6.1, Linux 2.2.12-20 PHP version: 4.0 Beta 3 PHP Bug Type: Reproduceable crash Bug description: apache crashes with php apache 1.3.9 or 1.3.11 glibc 2.1.12-11 (from rpm) Apache compiled with PHP4 crashes with segmentation fault. These crashes usually don't happen too often in common use, but if I compiled Apache with ElectricFence, it crashes on every request (even on request for a simle HTML page with clean Apache configuration - without any PHP configuration directives, even without php related AddType directives). If I compile Apache with efence and without PHP, it doesn't crash. Configuration: PHP: ./configure --with-apache=../apache_1.3.11 Apache: ./configure \ "--with-layout=Apache" \ "--prefix=/home/koles/local/apache" \ "--activate-module=src/modules/php4/libphp4.a" bin/httpd -X crashes with first request gdb bin/httpd core says: (no debugging symbols found)... Core was generated by `bin/httpd -X'. Program terminated with signal 11, Segmentation fault. Reading symbols from /lib/libdl.so.2...done. Reading symbols from /usr/lib/libgd.so.1...done. Reading symbols from /lib/libm.so.6...done. Reading symbols from /lib/libresolv.so.2...done. Reading symbols from /lib/libnsl.so.1...done. Reading symbols from /lib/libcrypt.so.1...done. Reading symbols from /usr/lib/libgdbm.so.2...done. Reading symbols from /lib/libpam.so.0...done. Reading symbols from /lib/libc.so.6...done. Reading symbols from /lib/ld-linux.so.2...done. Reading symbols from /lib/libnss_files.so.2...done. Reading symbols from /usr/lib/gconv/ISO8859-1.so...done. #0 gconv (step=0x41752fc8, data=0xbfffd9b8, inbuf=0xbfffd9ac, inbufend=0x401afd24 "", written=0xbfffd9b0, do_flush=0) at ../iconv/skeleton.c:204 204 ../iconv/skeleton.c: No such file or directory. (gdb) bt #0 gconv (step=0x41752fc8, data=0xbfffd9b8, inbuf=0xbfffd9ac, inbufend=0x401afd24 "", written=0xbfffd9b0, do_flush=0) at ../iconv/skeleton.c:204 #1 0x4013193b in __mbrtowc (pwc=0xbfffdaa0, s=0x401afd23 ".", n=1, ps=0xbfffdaa4) at mbrtowc.c:67 #2 0x4011c0f6 in _IO_vfscanf (s=0xbfffdb10, format=0x813ba6d "HTTP/%u.%u", argptr=0xbfffdbd8, errp=0x0) at vfscanf.c:254 #3 0x4012196e in _IO_vsscanf (string=0x40a4f748 "HTTP/1.0", format=0x813ba6d "HTTP/%u.%u", args=0xbfffdbd8) at iovsscanf.c:44 #4 0x4011f73f in sscanf (s=0x40a4f748 "HTTP/1.0", format=0x813ba6d "HTTP/%u.%u") at sscanf.c:38 #5 0x80e0dab in strcpy () at ../sysdeps/generic/strcpy.c:30 #6 0x80e11e5 in strcpy () at ../sysdeps/generic/strcpy.c:30 #7 0x80de3c2 in strcpy () at ../sysdeps/generic/strcpy.c:30 #8 0x80de58c in strcpy () at ../sysdeps/generic/strcpy.c:30 #9 0x80de6e9 in strcpy () at ../sysdeps/generic/strcpy.c:30 #10 0x80ded16 in strcpy () at ../sysdeps/generic/strcpy.c:30 #11 0x80df4a3 in strcpy () at ../sysdeps/generic/strcpy.c:30 #12 0x400e71eb in __libc_start_main (main=0x80df15c <strcpy+602940>, argc=2, argv=0xbffffd44, init=0x804afa0 <_init>, fini=0x8113d1c <_fini>, rtld_fini=0x4000a610 <_dl_fini>, stack_end=0xbffffd3c) at ../sysdeps/generic/libc-start.c:90