Re: PHP 4.0 Bug #7913 Updated: crash on http HEAD when ob_start used in index.php

Bug Database wrote: > > ID: 7913 > Updated by: sniper > Reported By: raarts@netland.nl > Old-Status: Open > Status: Feedback > Bug Type: Reproduceable crash > Assigned To: > Comments: > > Does this happen with latest snapshot from http://snaps.php.net/ªéÍÎ$ŸË:ØbÝ > #]ƒ ? > > --Jani > Yes, it does happen with 200101072345 Ron > Previous Comments: > --------------------------------------------------------------------------- > > [2000-11-21 18:33:52] raarts@netland.nl > See subject. The php script I used contained > *only* an ob_start() and after that some normal > HTML. The GET command did not result in a crash, > the HEAD command did. > > Here is the spec file I used to create apache+php: > > %define contentdir /gar/www > %define apache_ver 1.3.14 > %define mod_ssl_ver 2.7.1 > %define php_ver 4.0.3pl1 > %define gd_ver 1.8.3 > > Summary: The most widely used Web server on the Internet. > Name: apache-upwatch > Version: %{apache_ver} > Release: 25 > Group: System Environment/Daemons > Source: > ftp://ftp.apache.org/apache/dist/apache_%{version}.tar.gz > Source1: > ftp://ftp.modssl.org/source/mod_ssl-%{mod_ssl_ver}-%{version}.tar.gz > Source2: spacer48.png > Source3: apache-index.html > Source4: poweredby.png > Source5: httpd.init > Source6: apache.logrotate > Source7: apache-access.conf > Source8: apache-httpd.conf > Source9: apache-srm.conf > Source10: > ftp://ftp.cohprog.com/pub/apache/module/1.3.0/mod_bandwidth.c > Source11: mod_put.c > Source12: > http://www.snert.com/Software/Throttle/mod_throttle208.tgz > Source13: SSL-Certificate-Creation > Source14: php-%{php_ver}.tar.gz > Source15: gd-%{gd_ver}.tar.gz > Patch0: apache_1.3.12-eapi-2.6.4.patch > Patch1: apache_1.3.12-redhat.patch > Patch2: apache-1.3.11-apxs.patch > Patch3: apache_1.3.12-phhttpd-eapi.patch > Patch4: apache_1.3.12-piranha.patch > Patch5: mod_ssl-2.6.4-tty.patch > Patch6: gd-ttf.patch > > Copyright: Freely distributable and usable > BuildRoot: %{_tmppath}/apache-root > BuildPrereq: findutils, openssl-devel, perl > Requires: /etc/mime.types, gawk, file > Prereq: /sbin/chkconfig, /bin/mktemp, /bin/rm, /bin/mv, /bin/sed, mailcap, grep > Prereq: textutils, /usr/sbin/useradd, /etc/init.d > Provides: webserver > > %description > Apache is a powerful, full-featured, efficient and freely-available > Web server. Apache is also the most popular Web server on the > Internet. > > Install the apache package if you need a Web server. > > %package -n mod_ssl > Group: System Environment/Daemons > Version: %{mod_ssl_ver} > Summary: HTTPS (HTTP over SSL) support for the Apache Web server. > Requires: apache-upwatch = %{apache_ver}-%{release} > Prereq: openssl, dev > > %description -n mod_ssl > The mod_ssl package contains mod_ssl %{mod_ssl_ver}, the server module that > adds SSL support to the Apache Web server. If you need a secure web > server, install this package and read > http://localhost/manual/mod/mod_ssl/ > for documentation about how to configure the SSL support. > > %package devel > Version: %{apache_ver} > Group: Development/Libraries > Summary: Development tools for the Apache Web server. > Obsoletes: secureweb-devel > > %description devel > The apache-devel package contains the APXS binary and other files that > you'll need to build Dynamic Shared Objects (DSOs) for Apache. > > If you are installing the Apache Web server, and you want to be > able to compile or develop additional modules for Apache, you'll > need to install this package. > > %package manual > Version: %{apache_ver} > Group: Documentation > Summary: Documentation for the Apache Web server. > > %description manual > The apache-manual package contains the complete manual and reference > guide for the Apache Web server. If you need Apache documentation > installed on the local machine, install this package. The information > can also be found on the Web at http://www.apache.org/docs/. > > %prep > %setup -q -n apache_%{version} -a 1 -a 12 -a 14 -a 15 > > #%patch0 -p1 -b .eapi > pushd mod_ssl-%{mod_ssl_ver}-%{version} > %configure --with-apache=cd ..;pwd --with-eapi-only > popd > > %patch1 -p1 -b .redhat > %patch2 -p1 -b .apxs > #%patch3 -p1 -b .phttpd-eapi > %patch4 -p1 -b .piranha > pushd mod_ssl-%{mod_ssl_ver}-%{version} > %patch5 -p2 -b .tty > popd > > pushd gd-%{gd_ver} > %patch6 -p0 -b .ttf > popd > > %build > TARGET_PLATFORM=%{_target_platform} > %define _target_platform --target=${TARGET_PLATFORM} > > pushd mod_ssl-%{mod_ssl_ver}-%{version} > %configure --with-apache=cd ..;pwd > popd > > pushd gd-%{gd_ver} > make > popd > > # configure once for php > ./configure > > pushd php-%{php_ver} > ./configure > --prefix=%{_prefix} > --with-apache=cd ..;pwd > --with-mysql=%{_prefix} > --enable-debug > --enable-pic > --enable-inline-optimization > --with-exec-dir=%{_bindir} > --with-regex=system > --with-gettext > --with-gd=../gd-%{gd_ver} > --with-jpeg-dir=%{_prefix} > --with-png > --with-zlib > --with-gdbm > --enable-debugger > --enable-magic-quotes > --enable-safe-mode > --enable-sysvsem > --enable-sysvshm > --enable-track-vars > --enable-trans-sid > --enable-ftp > --with-xml > > # --target=%{_target_platform} > > make > make install > > popd > > EXTRA_CFLAGS=-g ./configure > --prefix=%{_prefix} > --exec-prefix=%{_prefix} > --bindir=%{_bindir} > --sbindir=%{_sbindir} > --libexecdir=%{_libdir}/apache > --mandir=%{_mandir} > --localstatedir=%{_localstatedir} > --sysconfdir=%{_sysconfdir}/httpd/conf > --datadir=%{contentdir} > --includedir=%{_includedir}/apache > --libexecdir=%{_libdir}/apache > --iconsdir=%{contentdir}/icons > --htdocsdir=%{contentdir}/html > --cgidir=%{contentdir}/cgi-bin > --runtimedir=%{_var}/httpd > --logfiledir=%{_var}/log/httpd > --proxycachedir=%{_var}/cache/httpd > --add-module=$RPM_SOURCE_DIR/mod_bandwidth.c > --add-module=$RPM_SOURCE_DIR/mod_put.c > --activate-module=src/modules/throttle/mod_throttle.o > --activate-module=src/modules/php4/libphp4.a > --enable-module=all > --enable-shared=ssl > --enable-rule=EAPI > --disable-rule=WANTHSREGEX > --disable-module=auth_dbm > --with-perl=%{__perl} > --enable-suexec > --suexec-docroot=%{contentdir}/html > --without-execstrip > --suexec-caller=apache > make > > %install > [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT > %{makeinstall} sysconfdir=$RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf > includedir=$RPM_BUILD_ROOT%{_includedir}/apache > libexecdir=$RPM_BUILD_ROOT%{_libdir}/apache > iconsdir=$RPM_BUILD_ROOT%{contentdir}/icons > htdocsdir=$RPM_BUILD_ROOT%{contentdir}/html > cgidir=$RPM_BUILD_ROOT%{contentdir}/cgi-bin > runtimedir=$RPM_BUILD_ROOT%{_var}/httpd > logfiledir=$RPM_BUILD_ROOT%{_var}/log/httpd > proxycachedir=$RPM_BUILD_ROOT%{_var}/cache/httpd > > # remove apachectl; we have our own SYSV init stuff > rm $RPM_BUILD_ROOT%{_sbindir}/apachectl > rm $RPM_BUILD_ROOT%{_mandir}/man8/apachectl.8 > > # install SYSV init stuff > mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d > install -m755 $RPM_SOURCE_DIR/httpd.init > $RPM_BUILD_ROOT/etc/rc.d/init.d/httpd > > # install log rotation stuff > mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d > install -m644 $RPM_SOURCE_DIR/apache.logrotate > $RPM_BUILD_ROOT/etc/logrotate.d/apache > > ln -s ../../var/log/httpd $RPM_BUILD_ROOT/etc/httpd/logs > ln -s ../../usr/lib/apache $RPM_BUILD_ROOT/etc/httpd/modules > > install -m644 $RPM_SOURCE_DIR/apache-index.html > $RPM_BUILD_ROOT%{contentdir}/html/index.html > install -m644 $RPM_SOURCE_DIR/poweredby.png > $RPM_BUILD_ROOT%{contentdir}/html > > # replace Apache's default config files with our own versions > install -m644 $RPM_SOURCE_DIR/apache-access.conf > $RPM_BUILD_ROOT/etc/httpd/conf/access.conf > > install -m644 $RPM_SOURCE_DIR/apache-httpd.conf > $RPM_BUILD_ROOT/etc/httpd/conf/httpd.conf > > install -m644 $RPM_SOURCE_DIR/apache-srm.conf > $RPM_BUILD_ROOT/etc/httpd/conf/srm.conf > > # Remove default keys and certs, install docs, and point to the right makefile. > mkdir -p $RPM_BUILD_ROOT%{contentdir}/html/manual/mod/mod_ssl/ > install -m644 mod_ssl-%{mod_ssl_ver}-%{version}/pkg.ssldoc/*.{html,gif,jpg} > $RPM_BUILD_ROOT%{contentdir}/html/manual/mod/mod_ssl/ > rm -f $RPM_BUILD_ROOT/etc/httpd/conf/ssl.*/server.* > ln -s ../../../usr/share/ssl/certs/Makefile $RPM_BUILD_ROOT/etc/httpd/conf > > # install apache source code for devel package > #mkdir -p $RPM_BUILD_ROOT/usr/src > #tar xzf $RPM_SOURCE_DIR/apache_%{version}.tar.gz -C $RPM_BUILD_ROOT/usr/src > find $RPM_BUILD_ROOT -type f | > xargs grep -l "/usr/local/bin/perl5" | > xargs perl -pi -e "s|/usr/local/bin/perl5|/usr/bin/perl|g;" > find $RPM_BUILD_ROOT -type f | > xargs grep -l "/usr/local/bin/perl" | > xargs perl -pi -e "s|/usr/local/bin/perl|/usr/bin/perl|g;" > > # clean up apxs > sed "s^$RPM_BUILD_ROOT^^g" $RPM_BUILD_ROOT%{_sbindir}/apxs > apxs.tmp && > cat apxs.tmp > $RPM_BUILD_ROOT%{_sbindir}/apxs > > %clean > rm -rf $RPM_BUILD_ROOT > > %post > /sbin/chkconfig --add httpd > # safely add .htm to mime types if it is not already there > [ -f /etc/mime.types ] || exit 0 > TEMPTYPES=/bin/mktemp /tmp/mimetypes.XXXXXX > [ -z "$TEMPTYPES" ] && { > echo "could not make temporary file, htm not added to /etc/mime.types" >&2 > exit 1 > } > ( grep -v "^text/html" /etc/mime.types > types=$(grep "^text/html" /etc/mime.types | cut -f2-) > echo -en "text/htmlttt" > for val in $types ; do > if [ "$val" = "htm" ] ; then > continue > fi > echo -n "$val " > done > echo "htm" > ) > $TEMPTYPES > cat $TEMPTYPES > /etc/mime.types && /bin/rm -f $TEMPTYPES > > %pre > # Add the "apache" user > /usr/sbin/useradd -c "Apache" -u 48 > -s /bin/false -r -d /var/www apache 2> /dev/null || : > > %preun > if [ $1 = 0 ]; then > /sbin/service httpd stop > /dev/null 2>&1 > /sbin/chkconfig --del httpd > fi > > %files > %defattr(-,root,root) > %dir /etc/httpd/conf > %config /etc/httpd/conf/access.conf > %config /etc/httpd/conf/srm.conf > %config /etc/httpd/conf/httpd.conf > > /etc/httpd/logs > /etc/httpd/modules > %config /etc/logrotate.d/apache > %config /etc/rc.d/init.d/httpd > > %dir %{contentdir} > %{contentdir}/cgi-bin > %dir %{contentdir}/html > %config(noreplace) %{contentdir}/html/index.html > %{contentdir}/html/poweredby.png > %{contentdir}/icons > > %dir %{_libdir}/apache > %{_libdir}/apache/httpd.exp > #%{_libdir}/apache/libproxy.so > #%{_libdir}/apache/mod*.so > > %{_mandir}/man1/* > %{_mandir}/man8/ab.8* > %{_mandir}/man8/httpd.8* > %{_mandir}/man8/logresolve.8* > %{_mandir}/man8/rotatelogs.8* > %{_mandir}/man8/suexec.8* > > %{_sbindir}/ab > %{_sbindir}/httpd > %{_sbindir}/logresolve > %{_sbindir}/rotatelogs > %attr(0711,root,root) %{_sbindir}/suexec > %{_bindir}/* > > %attr(-,apache,apache) %dir %{_var}/cache/httpd > %dir %{_var}/log/httpd > > %files manual > %defattr(-,root,root) > %dir %{contentdir}/html/manual > %{contentdir}/html/manual/LICENSE > %{contentdir}/html/manual/*.html > %{contentdir}/html/manual/images > %{contentdir}/html/manual/misc > %{contentdir}/html/manual/search > %{contentdir}/html/manual/vhosts > %dir %{contentdir}/html/manual/mod > %{contentdir}/html/manual/mod/*.html > > %files devel > %defattr(-,root,root) > %{_includedir}/apache > %{_sbindir}/apxs > %{_mandir}/man8/apxs.8* > > %post -n mod_ssl > /sbin/ldconfig > umask 077 > > if [ ! -f %{_sysconfdir}/httpd/conf/ssl.key/server.key ] ; then > %{_bindir}/openssl genrsa -rand > /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime > 1024 > %{_sysconfdir}/httpd/conf/ssl.key/server.key 2> /dev/null > fi > > if [ ! -f %{_sysconfdir}/httpd/conf/ssl.crt/server.crt ] ; then > cat << EOF | %{_bindir}/openssl req -new -key > %{_sysconfdir}/httpd/conf/ssl.key/server.key -x509 -days 365 -out > %{_sysconfdir}/httpd/conf/ssl.crt/server.crt 2>/dev/null > -- > SomeState > SomeCity > SomeOrganization > SomeOrganizationalUnit > localhost.localdomain > root@localhost.localdomain > EOF > fi > > %files -n mod_ssl > %defattr(-,root,root) > %doc $RPM_SOURCE_DIR/SSL-Certificate-Creation > %{contentdir}/html/manual/mod/mod_ssl/ > %{_libdir}/apache/libssl.so > %{_sysconfdir}/httpd/conf/Makefile > %attr(0700,root,root) %dir %{_sysconfdir}/httpd/conf/ssl.* > %{_sysconfdir}/httpd/conf/ssl.*/* > > GNU gdb 5.0 > Copyright 2000 Free Software Foundation, Inc. > GDB is free software, covered by the GNU General Public License, and you are > welcome to change it and/or distribute copies of it under certain conditions. > Type "show copying" to see the conditions. > There is absolutely no warranty for GDB. Type "show warranty" for details. > This GDB was configured as "alpha-redhat-linux"... > (gdb) b zend_bailout > Breakpoint 1 at 0x1200fa4e8: file zend.c, line 446. > (gdb) run -X > Starting program: /usr/src/redhat/BUILD/apache_1.3.14/src/httpd -X > > at this point I connected to port 80 an typed: > > HEAD / HTTP/1.0n > n > > Breakpoint 1, zend_bailout () at zend.c:446 > 446 CG(unclean_shutdown) = 1; > (gdb) where > #0 zend_bailout () at zend.c:446 > #1 0x1200ccf14 in php_end_ob_buffer (send_buffer=1) at output.c:157 > (gdb) bt full > #0 zend_bailout () at zend.c:446 > No locals. > #1 0x1200ccf14 in php_end_ob_buffer (send_buffer=1) at output.c:157 > final_buffer = 0x0 > final_buffer_length = 229 > alternate_buffer = (zval *) 0x11ffff650 > (gdb) n > 442 { > (gdb) > zend_bailout () at zend.c:447 > 447 longjmp(EG(bailout), FAILURE); > (gdb) > 446 CG(unclean_shutdown) = 1; > (gdb) where > #0 zend_bailout () at zend.c:446 > #1 0x12003bd54 in sapi_apache_send_headers (sapi_headers=0x12044de20) at mod_php4.c:226 > #2 0x1200cd560 in php_ub_body_write ( > str=0x12044de20 "<html>n<HEAD>n<META HTTP-EQUIV="REFRESH" > content="0;URL=">n</HEAD>n<body bgcolor="#ffffff">nPlease pres > s <a href=>here</a> if it does not work by > itself.n</body>n</html>n<!-- $Id: index.php,v 1.6 1999"..., str_length=229) > at output.c:358 > (gdb) n > 442 { > (gdb) n > 446 CG(unclean_shutdown) = 1; > (gdb) n > 447 longjmp(EG(bailout), FAILURE); > (gdb) where > #0 zend_bailout () at zend.c:447 > #1 0x1200cd5a0 in php_ub_body_write ( > str=0x12044de20 "<html>n<HEAD>n<META HTTP-EQUIV="REFRESH" > content="0;URL=">n</HEAD>n<body bgcolor="#ffffff">nPlease pres > s <a href=>here</a> if it does not work by > itself.n</body>n</html>n<!-- $Id: index.php,v 1.6 1999"..., str_length=229) > at output.c:368 > #2 0x1200ccf14 in php_end_ob_buffer (send_buffer=1) at output.c:157 > #3 0x1200ccfb8 in php_end_ob_buffers (send_buffer=1) at output.c:172 > #4 0x12010d500 in apache_php_module_main (r=0x1203993d0, display_source_mode=0) at > sapi_apache.c:93 > #5 0x12003c928 in send_php (r=0x12043d520, display_source_mode=0, filename=0x12043dfc8 > "/home/uwat/www/index.php") at mod_php4.c:510 > #6 0x12003c9ac in send_parsed_php (r=0x12043d520) at mod_php4.c:521 > #7 0x12018b77c in ap_invoke_handler (r=0x12043d520) at http_config.c:516 > #8 0x1201ab590 in process_request_internal (r=0x12043d520) at http_request.c:1282 > #9 0x1201abc1c in ap_internal_redirect (new_uri=0x12043d4f8 "/index.php", > r=0x120419680) at http_request.c:1409 > #10 0x120163920 in handle_dir (r=0x120419680) at mod_dir.c:173 > #11 0x12018b77c in ap_invoke_handler (r=0x120419680) at http_config.c:516 > #12 0x1201ab590 in process_request_internal (r=0x120419680) at http_request.c:1282 > #13 0x1201ab654 in ap_process_request (r=0x120419680) at http_request.c:1298 > #14 0x12019ec18 in child_main (child_num_arg=0) at http_main.c:4299 > #15 0x12019eeac in make_child (s=0x12039d890, slot=0, now=974849140) at http_main.c:4412 > #16 0x12019f0f0 in startup_children (number_to_start=8) at http_main.c:4494 > #17 0x12019fa88 in standalone_main (argc=2, argv=0x11ffffa68) at http_main.c:4782 > #18 0x1201a0574 in main (argc=2, argv=0x11ffffa68) at http_main.c:5124 > #19 0x200010698e4 in __libc_start_main (main=0x1201a0060 <main>, argc=2, > argv=0x11ffffa68, init=0x1200264e0 <_init>, > ---Type <return> to continue, or q <return> to quit--- > fini=0x1201fc0a0 <_fini>, rtld_fini=0x2000011d910 <_dl_debug_impcalls>, > stack_end=0x11ffffa50) > at ../sysdeps/generic/libc-start.c:92 > (gdb) n > warning: Cannot insert breakpoint -43: > Cannot access memory at address 0x2 > (gdb) n > > Breakpoint 1, zend_bailout () at zend.c:446 > 446 CG(unclean_shutdown) = 1; > (gdb) > 442 { > (gdb) > zend_bailout () at zend.c:447 > 447 longjmp(EG(bailout), FAILURE); > (gdb) > 446 CG(unclean_shutdown) = 1; > (gdb) > 442 { > (gdb) > 446 CG(unclean_shutdown) = 1; > (gdb) > 447 longjmp(EG(bailout), FAILURE); > (gdb) > warning: Cannot insert breakpoint -43: > Cannot access memory at address 0x2 > (gdb) > > Program received signal SIGILL, Illegal instruction. > 0x120393588 in output_globals () > (gdb) > > --------------------------------------------------------------------------- > > The remainder of the comments for this report are too long. To view the rest of the comments, > please view the bug report online. > > Full Bug description available at: http://bugs.php.net/?id=7913