Debian Bug report logs - #305217
PHP's bug#32330 causes issues with session handling

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Samuel Mouniee <mouns@mouns.net>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: squirrelmail may need integration of workaround for php's known bug

Date: Mon, 18 Apr 2005 20:02:28 +0200

Package: squirrelmail
Severity: normal


hello,


since few days, squirrelmail have this error on one of my server :
 Fatal error: session_start(): Failed to initialize storage module: user
(path: /var/lib/php4) in /usr/share/squirrelmail/functions/global.php on
line 333

I googlized informations and found this phpbug and a workaround

http://bugs.php.net/bug.php?id=32330
http://tavi.sourceforge.net/bug32330.php
http://tavi.sourceforge.net/bug32330fix.php

I don't know how integrate it in squirrelmail.

line 333 is in :

function sqsession_is_active() {

    $sessid = session_id();
    if ( empty( $sessid ) ) {
        session_start(); // line 333
    }
}


this bug may concern other php package in debian.



Amicalement,


Samuel.



-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686-smp
Locale: LANG=fr_FR@euro, LC_CTYPE=fr_FR@euro (charmap=ISO-8859-15)

Message #10 received at 305217@bugs.debian.org (full text, mbox, reply):

From: Samuel Mouniée <mouns@mouns.net>

To: 305217@bugs.debian.org

Subject: Re: Bug#305217: Acknowledgement (squirrelmail may need integration of workaround for php's known bug)

Date: Mon, 18 Apr 2005 20:14:55 +0200

Hello,

I add in config.php

ini_set("session.save_handler", "files");
ini_set("session.save_path", "/var/lib/php4");

and it is a good workaround.

Samuel.


Le lundi 18 avril 2005 à 11:03 -0700, Debian Bug Tracking System a
écrit :
> Thank you for the problem report you have sent regarding Debian.
> This is an automatically generated reply, to let you know your message has
> been received.  It is being forwarded to the package maintainers and other
> interested parties for their attention; they will reply in due course.
> 
> Your message has been sent to the package maintainer(s):
>  Jeroen van Wolffelaar <jeroen@wolffelaar.nl>
> 
> If you wish to submit further information on your problem, please send
> it to 305217@bugs.debian.org (and *not* to
> submit@bugs.debian.org).
> 
> Please do not reply to the address at the top of this message,
> unless you wish to report a problem with the Bug-tracking system.
> 
> Debian bug tracking system administrator
> (administrator, Debian Bugs database)
-- 
Samuel Mouniée

Message #15 received at 305217@bugs.debian.org (full text, mbox, reply):

From: Jeroen van Wolffelaar <jeroen@wolffelaar.nl>

To: Samuel Mouniee <mouns@mouns.net>, 305217@bugs.debian.org

Cc: Debian Bugs Control Bot <control@bugs.debian.org>

Subject: Re: squirrelmail may need integration of workaround for php's known bug

Date: Mon, 18 Apr 2005 23:30:35 +0200

reassign 305217 php4
retitle 305217 PHP's bug#32330 causes issues with session handling
thanks

On Mon, Apr 18, 2005 at 08:02:28PM +0200, Samuel Mouniee wrote:
> hello,
> 
> 
> since few days, squirrelmail have this error on one of my server :
>  Fatal error: session_start(): Failed to initialize storage module: user
> (path: /var/lib/php4) in /usr/share/squirrelmail/functions/global.php on
> line 333
> 
> I googlized informations and found this phpbug and a workaround
> 
> http://bugs.php.net/bug.php?id=32330
> http://tavi.sourceforge.net/bug32330.php
> http://tavi.sourceforge.net/bug32330fix.php
> 
> I don't know how integrate it in squirrelmail.

This bug should be fixed in the php package, not worked around in all of
debian's php applications.

Btw, what exact version of php are you running? You didn't include that
(valueable) information.

Note, I didn't (try to) confirm this bug yet.

--Jeroen

-- 
Jeroen van Wolffelaar
jeroen@wolffelaar.nl
http://jeroen.A-Eskwadraat.nl

Message #24 received at 305217@bugs.debian.org (full text, mbox, reply):

From: "Adam Conrad" <adconrad@0c3.net>

To: 305217-submitter@bugs.debian.org

Cc: 305217@bugs.debian.org

Subject: Re: Processed: Re: squirrelmail may need integration of workaround for php's known bug

Date: Tue, 19 Apr 2005 14:40:03 +1000 (EST)

Debian Bug Tracking System wrote:
>
>> retitle 305217 PHP's bug#32330 causes issues with session handling
> Bug#305217: squirrelmail may need integration of workaround for php's
> known bug Changed Bug title.

Regarding this bug, you do realise that #32330 referenced above actually
refers to a very specific (and not-too common, and
probably-not-found-in-squirrelmail) bug, while a majority of the followups
discuss various other "bugs" and user errors?

If doing nothing more than an "ini_set()" at the top of the script fixes
your issues, then I'd put 20-1 odds on your php.ini not being correct. 
Can I see a copy of it, to see how it's currently configured.  This could
be my fault for poorly upgrading it at one point (though I haven't yet had
any complaints), or simple user error in setting something wrong.

Also, the output of a page with "phpinfo();" on it would be nice, too. 
Perhaps something's being (re)set later in the configuration stack and
overriding php.ini.

... Adam

Message #32 received at 305217@bugs.debian.org (full text, mbox, reply):

From: Samuel Mouniée <mouns@mouns.net>

To: Jeroen van Wolffelaar <jeroen@wolffelaar.nl>

Cc: 305217@bugs.debian.org

Subject: Re: squirrelmail may need integration of workaround for php's known bug

Date: Thu, 21 Apr 2005 01:29:51 +0200

Le lundi 18 avril 2005 à 23:30 +0200, Jeroen van Wolffelaar a écrit :
> > since few days, squirrelmail have this error on one of my server :
> >  Fatal error: session_start(): Failed to initialize storage module: user
> > (path: /var/lib/php4) in /usr/share/squirrelmail/functions/global.php on
> > line 333
> > 
> > I googlized informations and found this phpbug and a workaround
> > 
> > http://bugs.php.net/bug.php?id=32330
> > http://tavi.sourceforge.net/bug32330.php
> > http://tavi.sourceforge.net/bug32330fix.php
> > 
> > I don't know how integrate it in squirrelmail.
> 
> This bug should be fixed in the php package, not worked around in all of
> debian's php applications.

I think so, and I gave you all the information I found, and a workaround
for squirrelmail ...

> Btw, what exact version of php are you running? You didn't include that
> (valueable) information.

sorry about that :|

ii  squirrelmail          1.4.4-4
ii  php4                  4.3.10-10
ii  php4-cli              4.3.10-10
ii  php4-common           4.3.10-10
ii  libapache2-mod-php4   4.3.10-10
...

> Note, I didn't (try to) confirm this bug yet.

I had it in a user-mode-linux and a native-linux, just after a recent
update.
restart apache ? nc ( aka nothing changed ).
reboot ? nc.
halt & really cold boot ? nc.
changing php.ini ? nc.

add 2 lines in the squirrelmail configfile ? come back to normal.

Amicalement,

-- 
Samuel Mouniée

Message #37 received at 305217@bugs.debian.org (full text, mbox, reply):

From: Samuel Mouniée <mouns@mouns.net>

To: 305217-quiet@bugs.debian.org, adconrad@0c3.net

Cc: 305217@bugs.debian.org

Subject: Re: Bug#305217: Processed: Re: squirrelmail may need integration of workaround for php's known bug

Date: Thu, 21 Apr 2005 02:20:52 +0200

hello,

Le mardi 19 avril 2005 à 14:40 +1000, Adam Conrad a écrit :
> Regarding this bug, you do realise that #32330 referenced above actually
> refers to a very specific (and not-too common, and
> probably-not-found-in-squirrelmail) bug, while a majority of the followups
> discuss various other "bugs" and user errors?
> 
> If doing nothing more than an "ini_set()" at the top of the script fixes
> your issues, then I'd put 20-1 odds on your php.ini not being correct. 
> Can I see a copy of it, to see how it's currently configured.  This could
> be my fault for poorly upgrading it at one point (though I haven't yet had
> any complaints), or simple user error in setting something wrong.
> 
> Also, the output of a page with "phpinfo();" on it would be nice, too. 
> Perhaps something's being (re)set later in the configuration stack and
> overriding php.ini.

rm -f /etc/php4/apache2/php.ini
apt-get install --reinstall libapache2-mod-php4

without the workaround :
atal error: session_start(): Failed to initialize storage module: user
(path: /var/lib/php4) in /usr/share/squirrelmail/functions/global.php on
line 333

with the workaround : OK.


grep "^[^;]" /etc/php4/apache2/php.ini
[PHP]
engine = On
short_open_tag = On
asp_tags = Off
precision    =  12
y2k_compliance = On
output_buffering = Off
zlib.output_compression = Off
implicit_flush = Off
unserialize_callback_func=
serialize_precision = 100
allow_call_time_pass_reference = On
safe_mode = Off
safe_mode_gid = Off
safe_mode_include_dir =
safe_mode_exec_dir =
safe_mode_allowed_env_vars = PHP_
safe_mode_protected_env_vars = LD_LIBRARY_PATH
disable_functions =
disable_classes =
expose_php = On
max_execution_time = 30
max_input_time = 60
memory_limit = 8M
error_reporting  =  E_ALL & ~E_NOTICE
display_errors = On
display_startup_errors = Off
log_errors = Off
log_errors_max_len = 1024
ignore_repeated_errors = Off
ignore_repeated_source = Off
report_memleaks = On
track_errors = Off


variables_order = "EGPCS"
register_globals = Off
register_argc_argv = On
post_max_size = 8M
gpc_order = "GPC"
magic_quotes_gpc = On
magic_quotes_runtime = Off
magic_quotes_sybase = Off
auto_prepend_file =
auto_append_file =
default_mimetype = "text/html"
doc_root =
user_dir =
enable_dl = On

file_uploads = On
upload_max_filesize = 2M
allow_url_fopen = On
default_socket_timeout = 60
[Syslog]
define_syslog_variables  = Off
[mail function]
SMTP = localhost
smtp_port = 25
[Java]
[SQL]
sql.safe_mode = Off
[ODBC]
odbc.allow_persistent = On
odbc.check_persistent = On
odbc.max_persistent = -1
odbc.max_links = -1
odbc.defaultlrl = 4096
odbc.defaultbinmode = 1
[MySQL]
mysql.allow_persistent = On
mysql.max_persistent = -1
mysql.max_links = -1
mysql.default_port =
mysql.default_socket =
mysql.default_host =
mysql.default_user =
mysql.default_password =
mysql.connect_timeout = 60
mysql.trace_mode = Off
[mSQL]
msql.allow_persistent = On
msql.max_persistent = -1
msql.max_links = -1
[PostgresSQL]
pgsql.allow_persistent = On
pgsql.auto_reset_persistent = Off
pgsql.max_persistent = -1
pgsql.max_links = -1
pgsql.ignore_notice = 0
pgsql.log_notice = 0
[Sybase]
sybase.allow_persistent = On
sybase.max_persistent = -1
sybase.max_links = -1
sybase.min_error_severity = 10
sybase.min_message_severity = 10
sybase.compatability_mode = Off
[Sybase-CT]
sybct.allow_persistent = On
sybct.max_persistent = -1
sybct.max_links = -1
sybct.min_server_severity = 10
sybct.min_client_severity = 10
[dbx]
dbx.colnames_case = "unchanged"
[bcmath]
bcmath.scale = 0
[browscap]
[Informix]
ifx.default_host =
ifx.default_user =
ifx.default_password =
ifx.allow_persistent = On
ifx.max_persistent = -1
ifx.max_links = -1
ifx.textasvarchar = 0
ifx.byteasvarchar = 0
ifx.charasvarchar = 0
ifx.blobinfile = 0
ifx.nullformat = 0
[Session]
session.save_handler = files
session.use_cookies = 1
session.name = PHPSESSID
session.auto_start = 0
session.cookie_lifetime = 0
session.cookie_path = /
session.cookie_domain =
session.serialize_handler = php
session.gc_divisor     = 100
session.gc_maxlifetime = 1440
session.bug_compat_42 = 1
session.bug_compat_warn = 1
session.referer_check =
session.entropy_length = 0
session.entropy_file =
session.cache_limiter = nocache
session.cache_expire = 180
session.use_trans_sid = 0
url_rewriter.tags =
"a=href,area=href,frame=src,input=src,form=,fieldset="
[MSSQL]
mssql.allow_persistent = On
mssql.max_persistent = -1
mssql.max_links = -1
mssql.min_error_severity = 10
mssql.min_message_severity = 10
mssql.compatability_mode = Off
mssql.secure_connection = Off
[Assertion]
[Ingres II]
ingres.allow_persistent = On
ingres.max_persistent = -1
ingres.max_links = -1
ingres.default_database =
ingres.default_user =
ingres.default_password =
[Verisign Payflow Pro]
pfpro.defaulthost = "test-payflow.verisign.com"
pfpro.defaultport = 443
pfpro.defaulttimeout = 30
[com]
[Printer]
[mbstring]
[FrontBase]
[Crack]
[exif]
extension=mysql.so

the 3 blank lines are from the original output. I didn't check why ...
and it still the debian's standard php.ini

I had also on this server :
phpmyadmin 2.6.2-rc1-1 : actually working
drupal 4.5.2-3 : actually working


Amicalement,


-- 
Samuel Mouniée

Message #47 received at 305217@bugs.debian.org (full text, mbox, reply):

From: "Adam Conrad" <adconrad@0c3.net>

To: Samuel Mouniée <mouns@mouns.net>, 305217@bugs.debian.org

Subject: Re: Bug#305217: Processed: Re: squirrelmail may need integration of workaround for php's known bug

Date: Thu, 21 Apr 2005 11:39:36 +1000 (EST)

Samuel Mouni�e wrote:
>
> I had also on this server :
>
> phpmyadmin 2.6.2-rc1-1 : actually working
> drupal 4.5.2-3 : actually working

Hrm, that gets me to thinking.  While squirrelmail doesn't set a custom
session handler, other scripts on your system might be doing so.  See the
second-last comment (at [19 Apr 7:18am CEST]) at
http://bugs.php.net/32330.  Would it be possible to check for scripts on
your whole system (yes, this might involve a really painful rgrep) to see
if anything else is using session_set_save_handler or session_module_name?
 If so, we're probably talking about the same bug.  If not, we need to
figure out what bug you actually have. :)

Also, are you using the Zend Optimised?  If so, can you disable it?  If
that magically fixes things, perhaps this isn't PHP's bug at all, but
zend.com's.  The Optimised does seem to be a reasonably consistent factor
in many of the reports on the php.net bug, hence my curiosity.

... Adam

Message #52 received at 305217@bugs.debian.org (full text, mbox, reply):

From: Samuel Mouniée <mouns@mouns.net>

To: adconrad@0c3.net

Cc: 305217@bugs.debian.org

Subject: Re: Bug#305217: Processed: Re: squirrelmail may need integration of workaround for php's known bug

Date: Sat, 23 Apr 2005 20:40:34 +0200

Bonjour,


Le jeudi 21 avril 2005 à 11:39 +1000, Adam Conrad a écrit :
> > I had also on this server :
> >
> > phpmyadmin 2.6.2-rc1-1 : actually working
> > drupal 4.5.2-3 : actually working
> 
> Hrm, that gets me to thinking.  While squirrelmail doesn't set a custom
> session handler, other scripts on your system might be doing so.  See the
> second-last comment (at [19 Apr 7:18am CEST]) at
> http://bugs.php.net/32330.  Would it be possible to check for scripts on
> your whole system (yes, this might involve a really painful rgrep) to see
> if anything else is using session_set_save_handler or session_module_name?
>  If so, we're probably talking about the same bug.  If not, we need to
> figure out what bug you actually have. :)

drupal :

/etc/drupal/htaccess:   php_value session.save_handler    user
/etc/apache2/conf.d/drupal.conf:   php_value session.save_handler
user
/usr/share/drupal/includes/session.inc:session_set_save_handler("sess_open", "sess_close", "sess_read", "sess_write", "sess_destroy", "sess_gc");


about phpmyadmin ... I don't find any things with rgrep ... but may be I
didn't search the good thing.


bogus question ... why same examples of php.ini in many php packages ?



> Also, are you using the Zend Optimised?

what is it ? is it debian standard package ? :|


>   If so, can you disable it?

I can remove the package ... but I think I don't have it.


>  If that magically fixes things, perhaps this isn't PHP's bug at all,
>  but zend.com's.  The Optimised does seem to be a reasonably consistent
>  factor in many of the reports on the php.net bug, hence my curiosity.


Cordialement,


-- 
Samuel Mouniée

Message #61 received at 305217-done@bugs.debian.org (full text, mbox, reply):

From: Marco Rodrigues <gothicx@sapo.pt>

To: 305217-done@bugs.debian.org

Subject: php4 has been removed from Debian, closing #305217

Date: Fri, 23 May 2008 15:59:35 +0100

Version: 6:4.4.6-2+rm

The php4 package has been removed from Debian testing, unstable and
experimental, so I am now closing the bugs that were still opened
against it.

For more information about this package's removal, read
http://bugs.debian.org/428266 . That bug might give the reasons why
this package was removed, and suggestions of possible replacements.

Don't hesitate to reply to this mail if you have any question.

Thank you for your contribution to Debian.

-- 
Marco Rodrigues

http://Marco.Tondela.org

Send a report that this bug log contains spam.