Debian Bug report logs -
#574610
php5-xmlrpc: xmlrpc buildin system.multiCall segfaults when calling user defined function
Reported by: Robbert Muller <spam.me@grols.ch>
Date: Fri, 19 Mar 2010 11:15:04 UTC
Severity: important
Found in version php5/5.2.6.dfsg.1-1+lenny8
Fixed in version 5.3.3-7
Done: Ondřej Surý <ondrej@sury.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#574610; Package php5-xmlrpc.
(Fri, 19 Mar 2010 11:15:08 GMT) (full text, mbox, link).
Acknowledgement sent
to Robbert Muller <spam.me@grols.ch>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>.
(Fri, 19 Mar 2010 11:15:08 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Package: php5-xmlrpc
Version: 5.2.6.dfsg.1-1+lenny8
Severity: important
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello,
the xmlrpc_server segfaults when calling the buildin function system.multiCall on a user defined function.
build-in functions like system.listMethods work fine
it seems that this bug was already reported and fixed in php
see http://bugs.php.net/bug.php?id=27446
source:
<?php
function foo () { return "bar"; }
$server = xmlrpc_server_create ();
$single = xmlrpc_encode_request('foo', array() );
$multi = xmlrpc_encode_request('system.multiCall', array(
array(
array ( 'methodName' => 'foo' , 'params' => array() ),
) ) );
xmlrpc_server_register_method($server,'foo','foo');
var_dump ( xmlrpc_server_call_method ( $server , $single, null ) );
var_dump ( xmlrpc_server_call_method ( $server , $multi, null ) );
?>
backtrace from gdb:
[Switching to Thread 0xb781f6d0 (LWP 5441)]
0x082c6556 in zend_call_function (fci=0xbf9ca920, fci_cache=0x0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:696
696 /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c: No such file or directory.
in /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c
(gdb) bt
#0 0x082c6556 in zend_call_function (fci=0xbf9ca920, fci_cache=0x0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:696
#1 0x082c7b0c in call_user_function_ex (function_table=0x9889878, object_pp=0x0, function_name=0x0, retval_ptr_ptr=0xbf9ca988,
param_count=<error type>, params=0x99fcae8, no_separation=1, symbol_table=0x0)
at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:640
#2 0x082c7b8b in call_user_function (function_table=0x9889878, object_pp=0x0, function_name=0x0, retval_ptr=0x99fc128,
param_count=<error type>, params=0xbf9ca9c0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:613
#3 0xb6a22e30 in php_xmlrpc_callback (server=0x9a2c860, xRequest=0x9a2cce0, data=0xbf9caaa4)
at /tmp/buildd/php5-5.2.6.dfsg.1/ext/xmlrpc/xmlrpc-epi-php.c:873
#4 0xb6a2abb9 in XMLRPC_ServerCallMethod (server=0x9a2c860, request=0x9a2cce0, userData=0xbf9caaa4)
at /tmp/buildd/php5-5.2.6.dfsg.1/ext/xmlrpc/libxmlrpc/xmlrpc.c:2553
#5 0xb6a2635a in xsm_system_multicall_cb (server=0x9a2c860, input=0x9a2c970, userData=0xbf9caaa4)
at /tmp/buildd/php5-5.2.6.dfsg.1/ext/xmlrpc/libxmlrpc/system_methods.c:337
#6 0xb6a2abb9 in XMLRPC_ServerCallMethod (server=0x9a2c860, request=0x9a2c970, userData=0xbf9caaa4)
at /tmp/buildd/php5-5.2.6.dfsg.1/ext/xmlrpc/libxmlrpc/xmlrpc.c:2553
#7 0xb6a22a6d in zif_xmlrpc_server_call_method (ht=3, return_value=0x99fbd08, return_value_ptr=0x0, this_ptr=0x0,
return_value_used=1) at /tmp/buildd/php5-5.2.6.dfsg.1/ext/xmlrpc/xmlrpc-epi-php.c:1081
#8 0x0830d933 in zend_do_fcall_common_helper_SPEC (execute_data=0xbf9cad3c)
at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:200
#9 0x082f8dc0 in execute (op_array=0x99fafbc) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
#10 0x082d3500 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend.c:1215
#11 0x08289423 in php_execute_script (primary_file=0xbf9cd10c) at /tmp/buildd/php5-5.2.6.dfsg.1/main/main.c:2028
#12 0x08356981 in main (argc=2, argv=0xbf9cd1f4) at /tmp/buildd/php5-5.2.6.dfsg.1/sapi/cli/php_cli.c:1146
- -- System Information:
Debian Release: 5.0.4
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.29-bpo.2-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash
Versions of packages php5-xmlrpc depends on:
ii libapache2-mod-php 5.2.6.dfsg.1-1+lenny8 server-side, HTML-embedded scripti
ii libc6 2.7-18lenny2 GNU C Library: Shared libraries
ii libxml2 2.6.32.dfsg-5+lenny1 GNOME XML library
ii php5-cgi [phpapi-2 5.2.6.dfsg.1-1+lenny8 server-side, HTML-embedded scripti
ii php5-cli [phpapi-2 5.2.6.dfsg.1-1+lenny8 command-line interpreter for the p
ii php5-common 5.2.6.dfsg.1-1+lenny8 Common files for packages built fr
php5-xmlrpc recommends no packages.
php5-xmlrpc suggests no packages.
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkujVoAACgkQ3twlWS9jQkXgLQCfWn33ayheGTZQyxcvqLkhyjkk
YAgAn2S+QGNP1urF6j1xTUCirIrc8A5S
=1CQw
-----END PGP SIGNATURE-----
Reply sent
to Ondřej Surý <ondrej@sury.org>:
You have taken responsibility.
(Wed, 27 Apr 2011 08:34:21 GMT) (full text, mbox, link).
Notification sent
to Robbert Muller <spam.me@grols.ch>:
Bug acknowledged by developer.
(Wed, 27 Apr 2011 08:34:21 GMT) (full text, mbox, link).
Message #10 received at 574610-done@bugs.debian.org (full text, mbox, reply):
Version: 5.3.3-7
Hi,
since lenny is oldstable it will not get any updates now (except
security)[1], I am closing all segfault bugs filled against php5 in
lenny. (This is kind of saying that we don't care much about php5 in
lenny anymore).
If you believe the bug is still there, please provide evidence[2] and
a (preferably complete) test case with up-to-date squeeze (and/or
testing or unstable) version of php5 and reopen the bug.
O.
1. http://wiki.debian.org/PHP#Notes_on_PHP_and_security
2. Install php5-dbg and provide backtrace:
http://bugs.php.net/bugs-generating-backtrace.php
--
Ondřej Surý <ondrej@sury.org>
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Thu, 26 May 2011 07:31:46 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Sun Jul 2 01:12:38 2023;
Machine Name:
bembo
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.