Debian Bug report logs - #584885
segfault at 23230a23 ip 082dd987 sp bfc2b7a0 error 4 in php5-cgi[8048000+4cf000]

version graph

Package: php5-cgi; Maintainer for php5-cgi is (unknown);

Reported by: Ralf Hildebrandt <ralf.hildebrandt@charite.de>

Date: Mon, 7 Jun 2010 11:21:02 UTC

Severity: important

Found in version php5/5.2.6.dfsg.1-1+lenny8

Fixed in version 5.3.3-7

Done: Ondřej Surý <ondrej@sury.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#584885; Package php5-cgi. (Mon, 07 Jun 2010 11:21:05 GMT) (full text, mbox, link).


Acknowledgement sent to Ralf Hildebrandt <ralf.hildebrandt@charite.de>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Mon, 07 Jun 2010 11:21:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Ralf Hildebrandt <ralf.hildebrandt@charite.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: segfault at 23230a23 ip 082dd987 sp bfc2b7a0 error 4 in php5-cgi[8048000+4cf000]
Date: Mon, 07 Jun 2010 13:09:41 +0200
Package: php5-cgi
Version: 5.2.6.dfsg.1-1+lenny8
Severity: important


>From time to time php5-cgi crashes (we're running apache2 + fastcgi)

Jun  7 12:07:33 www kernel: [5501891.081576] php5-cgi[28148]: segfault at 23230a23 ip 082dd987 sp bfc2b7a0 error 4 in php5-cgi[8048000+4cf000]

I was able to get a coredump.

-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (990, 'stable'), (650, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-3-686-bigmem (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages php5-cgi depends on:
ii  libbz2-1.0      1.0.5-1                  high-quality block-sorting file co
ii  libc6           2.7-18lenny2             GNU C Library: Shared libraries
ii  libcomerr2      1.41.3-1                 common error description library
ii  libdb4.6        4.6.21-11                Berkeley v4.6 Database Libraries [
ii  libkrb53        1.6.dfsg.4~beta1-5lenny4 MIT Kerberos runtime libraries
ii  libmagic1       4.26-1                   File type determination library us
ii  libpcre3        7.6-2.1                  Perl 5 Compatible Regular Expressi
ii  libssl0.9.8     0.9.8n-1                 SSL shared libraries
ii  libxml2         2.6.32.dfsg-5+lenny1     GNOME XML library
ii  mime-support    3.44-1                   MIME files 'mime.types' & 'mailcap
ii  php5-common     5.2.6.dfsg.1-1+lenny8    Common files for packages built fr
ii  tzdata          2010a-0lenny1            time zone and daylight-saving time
ii  ucf             3.0016                   Update Configuration File: preserv
ii  zlib1g          1:1.2.3.3.dfsg-12        compression library - runtime

php5-cgi recommends no packages.

Versions of packages php5-cgi suggests:
ii  php-pear           5.2.6.dfsg.1-1+lenny8 PEAR - PHP Extension and Applicati

-- no debconf information




Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#584885; Package php5-cgi. (Mon, 07 Jun 2010 11:33:10 GMT) (full text, mbox, link).


Acknowledgement sent to Ralf Hildebrandt <Ralf.Hildebrandt@charite.de>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Mon, 07 Jun 2010 11:33:10 GMT) (full text, mbox, link).


Message #10 received at 584885@bugs.debian.org (full text, mbox, reply):

From: Ralf Hildebrandt <Ralf.Hildebrandt@charite.de>
To: 584885@bugs.debian.org
Subject: The Backtrace
Date: Mon, 7 Jun 2010 13:24:04 +0200
It was created using:
gdb -x /root/gdb.commands /usr/bin/php5-cgi /var/core/core-php5-cgi.28148
with /root/gdb.commands containing:

--- snip ---
backtrace full
info registers
x/16i $pc
thread apply all backtrace
quit
--- snip ---

GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
Reading symbols from /lib/i686/cmov/libcrypt.so.1...done.
Loaded symbols for /lib/i686/cmov/libcrypt.so.1
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /usr/lib/i686/cmov/libssl.so.0.9.8...done.
Loaded symbols for /usr/lib/i686/cmov/libssl.so.0.9.8
Reading symbols from /usr/lib/libdb-4.6.so...done.
Loaded symbols for /usr/lib/libdb-4.6.so
Reading symbols from /lib/libbz2.so.1.0...done.
Loaded symbols for /lib/libbz2.so.1.0
Reading symbols from /usr/lib/libpcre.so.3...done.
Loaded symbols for /usr/lib/libpcre.so.3
Reading symbols from /lib/i686/cmov/libresolv.so.2...done.
Loaded symbols for /lib/i686/cmov/libresolv.so.2
Reading symbols from /lib/i686/cmov/libm.so.6...done.
Loaded symbols for /lib/i686/cmov/libm.so.6
Reading symbols from /lib/i686/cmov/libdl.so.2...done.
Loaded symbols for /lib/i686/cmov/libdl.so.2
Reading symbols from /lib/i686/cmov/libnsl.so.1...done.
Loaded symbols for /lib/i686/cmov/libnsl.so.1
Reading symbols from /usr/lib/libgssapi_krb5.so.2...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /usr/lib/libk5crypto.so.3...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /lib/libcom_err.so.2...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libxml2.so.2...done.
Loaded symbols for /usr/lib/libxml2.so.2
Reading symbols from /lib/i686/cmov/libc.so.6...done.
Loaded symbols for /lib/i686/cmov/libc.so.6
Reading symbols from /usr/lib/i686/cmov/libcrypto.so.0.9.8...done.
Loaded symbols for /usr/lib/i686/cmov/libcrypto.so.0.9.8
Reading symbols from /lib/i686/cmov/libpthread.so.0...done.
Loaded symbols for /lib/i686/cmov/libpthread.so.0
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/lib/libkrb5support.so.0...done.
Loaded symbols for /usr/lib/libkrb5support.so.0
Reading symbols from /lib/libkeyutils.so.1...done.
Loaded symbols for /lib/libkeyutils.so.1
Reading symbols from /usr/lib/php5/20060613+lfs/apc.so...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/apc.so
Reading symbols from /lib/i686/cmov/librt.so.1...done.
Loaded symbols for /lib/i686/cmov/librt.so.1
Reading symbols from /usr/lib/php5/20060613+lfs/curl.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/curl.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/curl.so
Reading symbols from /usr/lib/libcurl.so.4...done.
Loaded symbols for /usr/lib/libcurl.so.4
Reading symbols from /usr/lib/libidn.so.11...done.
Loaded symbols for /usr/lib/libidn.so.11
Reading symbols from /usr/lib/libssh2.so.1...done.
Loaded symbols for /usr/lib/libssh2.so.1
Reading symbols from /usr/lib/liblber-2.4.so.2...done.
Loaded symbols for /usr/lib/liblber-2.4.so.2
Reading symbols from /usr/lib/libldap_r-2.4.so.2...done.
Loaded symbols for /usr/lib/libldap_r-2.4.so.2
Reading symbols from /usr/lib/libgcrypt.so.11...done.
Loaded symbols for /usr/lib/libgcrypt.so.11
Reading symbols from /usr/lib/libgpg-error.so.0...done.
Loaded symbols for /usr/lib/libgpg-error.so.0
Reading symbols from /usr/lib/libsasl2.so.2...done.
Loaded symbols for /usr/lib/libsasl2.so.2
Reading symbols from /usr/lib/libgnutls.so.26...done.
Loaded symbols for /usr/lib/libgnutls.so.26
Reading symbols from /usr/lib/libtasn1.so.3...done.
Loaded symbols for /usr/lib/libtasn1.so.3
Reading symbols from /usr/lib/php5/20060613+lfs/gd.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/gd.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/gd.so
Reading symbols from /usr/lib/libgd.so.2...done.
Loaded symbols for /usr/lib/libgd.so.2
Reading symbols from /usr/lib/libt1.so.5...done.
Loaded symbols for /usr/lib/libt1.so.5
Reading symbols from /usr/lib/libfreetype.so.6...done.
Loaded symbols for /usr/lib/libfreetype.so.6
Reading symbols from /usr/lib/libX11.so.6...done.
Loaded symbols for /usr/lib/libX11.so.6
Reading symbols from /usr/lib/libXpm.so.4...done.
Loaded symbols for /usr/lib/libXpm.so.4
Reading symbols from /usr/lib/libpng12.so.0...done.
Loaded symbols for /usr/lib/libpng12.so.0
Reading symbols from /usr/lib/libjpeg.so.62...done.
Loaded symbols for /usr/lib/libjpeg.so.62
Reading symbols from /usr/lib/libfontconfig.so.1...done.
Loaded symbols for /usr/lib/libfontconfig.so.1
Reading symbols from /usr/lib/libxcb-xlib.so.0...done.
Loaded symbols for /usr/lib/libxcb-xlib.so.0
Reading symbols from /usr/lib/libxcb.so.1...done.
Loaded symbols for /usr/lib/libxcb.so.1
Reading symbols from /usr/lib/libexpat.so.1...done.
Loaded symbols for /usr/lib/libexpat.so.1
Reading symbols from /usr/lib/libXau.so.6...done.
Loaded symbols for /usr/lib/libXau.so.6
Reading symbols from /usr/lib/libXdmcp.so.6...done.
Loaded symbols for /usr/lib/libXdmcp.so.6
Reading symbols from /usr/lib/php5/20060613+lfs/mcrypt.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/mcrypt.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mcrypt.so
Reading symbols from /usr/lib/libmcrypt.so.4...done.
Loaded symbols for /usr/lib/libmcrypt.so.4
Reading symbols from /usr/lib/libltdl.so.3...done.
Loaded symbols for /usr/lib/libltdl.so.3
Reading symbols from /usr/lib/php5/20060613+lfs/mhash.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/mhash.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mhash.so
Reading symbols from /usr/lib/libmhash.so.2...done.
Loaded symbols for /usr/lib/libmhash.so.2
Reading symbols from /usr/lib/php5/20060613+lfs/mysql.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/mysql.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mysql.so
Reading symbols from /usr/lib/libmysqlclient_r.so.15...done.
Loaded symbols for /usr/lib/libmysqlclient_r.so.15
Reading symbols from /usr/lib/php5/20060613+lfs/mysqli.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/mysqli.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mysqli.so
Reading symbols from /usr/lib/php5/20060613+lfs/pspell.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/pspell.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/pspell.so
Reading symbols from /usr/lib/libaspell.so.15...done.
Loaded symbols for /usr/lib/libaspell.so.15
Reading symbols from /usr/lib/libpspell.so.15...done.
Loaded symbols for /usr/lib/libpspell.so.15
Reading symbols from /usr/lib/libstdc++.so.6...done.
Loaded symbols for /usr/lib/libstdc++.so.6
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /usr/lib/php5/20060613+lfs/recode.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/recode.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/recode.so
Reading symbols from /usr/lib/librecode.so.0...done.
Loaded symbols for /usr/lib/librecode.so.0
Reading symbols from /usr/lib/php5/20060613+lfs/suhosin.so...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/suhosin.so
Reading symbols from /usr/lib/php5/20060613+lfs/xmlrpc.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/xmlrpc.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/xmlrpc.so
Reading symbols from /usr/lib/php5/20060613+lfs/xsl.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/xsl.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/xsl.so
Reading symbols from /usr/lib/libexslt.so.0...done.
Loaded symbols for /usr/lib/libexslt.so.0
Reading symbols from /usr/lib/libxslt.so.1...done.
Loaded symbols for /usr/lib/libxslt.so.1
Reading symbols from /lib/i686/cmov/libnss_files.so.2...done.
Loaded symbols for /lib/i686/cmov/libnss_files.so.2
Core was generated by `/usr/bin/php5-cgi'.
Program terminated with signal 11, Segmentation fault.
[New process 28148]
#0  0x082dd987 in _zend_hash_add_or_update (ht=0x8fd9b68, arKey=0x8fe30ac "REMOTE_ADDR", nKeyLength=<error type>, pData=0xbfc2b844, nDataSize=<error type>, pDest=0xbfc2b840, flag=1)
    at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:404
	in /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c
#0  0x082dd987 in _zend_hash_add_or_update (ht=0x8fd9b68, arKey=0x8fe30ac "REMOTE_ADDR", nKeyLength=<error type>, pData=0xbfc2b844, nDataSize=<error type>, pDest=0xbfc2b840, flag=1)
    at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:404
	h = <error type>
#1  0x082953d5 in php_register_variable_ex (var=0x8fe30ac "REMOTE_ADDR", val=0xbfc2b8a8, track_vars_array=0x8fd9b7c) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.h:340
	ip = 0x8 <Address 0x8 out of bounds>
	index = 0x8fe30ac "REMOTE_ADDR"
	escaped_index = 0xc <Address 0xc out of bounds>
	var_len = 11
	index_len = 11
	gpc_element = (zval *) 0x8fe3e04
	gpc_element_p = (zval **) 0x8fe3f60
	is_array = 0 '\0'
	symtable1 = (HashTable *) 0x8fd9b68
#2  0x080fc56a in php_sapi_filter (arg=4, var=0xb6590c3b "REMOTE_ADDR", val=0xbfc2b92c, val_len=<error type>, new_val_len=0x0) at /tmp/buildd/php5-5.2.6.dfsg.1/ext/filter/filter.c:421
	new_var = {value = {lval = 150880096, dval = 3.1904481536553914e-313, str = {val = 0x8fe3f60 "145.253.108.114", len = 15}, ht = 0x8fe3f60, obj = {handle = <error type>, 
      handlers = 0xf}}, refcount = <error type>, type = 6 '\006', is_ref = 12 '\f'}
	raw_var = {value = {lval = 150879280, dval = 3.1904481133396347e-313, str = {val = 0x8fe3c30 "145.253.108.114", len = 15}, ht = 0x8fe3c30, obj = {handle = <error type>, 
      handlers = 0xf}}, refcount = <error type>, type = 6 '\006', is_ref = 0 '\0'}
	array_ptr = (zval *) 0x8fe4088
	orig_array_ptr = (zval *) 0x8fd9b7c
	orig_var = 0x8fe30ac "REMOTE_ADDR"
	retval = 0
	arg = 589498915
#3  0xb6582787 in suhosin_input_filter_wrapper () from /usr/lib/php5/20060613+lfs/suhosin.so
No symbol table info available.
#4  0x0828edca in sapi_getenv (name=0xb6590c3b "REMOTE_ADDR", name_len=<error type>) at /tmp/buildd/php5-5.2.6.dfsg.1/main/SAPI.c:950
	value = 0x8fe3f88 "145.253.108.114"
	tmp = 0x23230a23 <Address 0x23230a23 out of bounds>
	value = 0x8fe3f88 "145.253.108.114"
#5  0xb6585c21 in suhosin_log () from /usr/lib/php5/20060613+lfs/suhosin.so
No symbol table info available.
#6  0x082dacf3 in zend_hash_check_destructor (pDestructor=0x9da0224) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:305
	left = 589498915
	right = 15
	found = 0 '\0'
	right = 15
	found = 0 '\0'
#7  0x082db11f in zend_hash_destroy (ht=0x8626648) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:710
	p = (Bucket *) 0xc68decc
	ht = (HashTable *) 0x8626648
#8  0x082ed2c3 in zend_object_std_dtor (object=0xc68decc) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects.c:45
	object = (zend_object *) 0xc68decc
#9  0x082ed302 in zend_objects_free_object_storage (object=0xc68decc) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects.c:122
	object = (zend_object *) 0xc68decc
#10 0x082f0440 in zend_objects_store_free_object_storage (objects=0x8551a68) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects_API.c:89
	i = <error type>
#11 0x082c4ff3 in shutdown_executor () at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:299
	__orig_bailout = (jmp_buf *) 0xbfc31f9c
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0xbfc31f9c
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1077740376, -1846034303, 1285423086}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
#12 0x082d051f in zend_deactivate () at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend.c:941
	__orig_bailout = (jmp_buf *) 0xbfc31f9c
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1077740184, -1845927807, 1309278702}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0xbfc31f9c
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1077740184, -1845927807, 1309278702}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0x8fd9e44
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1077740184, -1845927807, 1309278702}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0x158
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1077740184, -1845927807, 1309278702}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0x8fd9e44
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1077740184, -1845927807, 1309278702}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0xbfc31f9c
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1077740184, -1845927807, 1309278702}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
#13 0x08286698 in php_request_shutdown (dummy=0x0) at /tmp/buildd/php5-5.2.6.dfsg.1/main/main.c:1494
	report_memleaks = 1 '\001'
#14 0x0834ab15 in main (argc=1, argv=0xbfc321a4) at /tmp/buildd/php5-5.2.6.dfsg.1/sapi/cgi/cgi_main.c:2017
	__bailout = {{__jmpbuf = {139624612, 139547886, 139547864, -1077731064, -1845723007, 2100648942}, __mask_was_saved = 0, __saved_mask = {__val = 0x1c}}}
	free_query_string = 0
	exit_status = 0
	cgi = 0
	c = 589498915
	i = 188268120
	len = 188268120
	file_handle = {type = 2 '\002', filename = 0x8fd2be4 "", opened_path = 0x0, handle = {fd = 145172640, fp = 0x8a728a0, stream = {handle = 0x8a728a0, 
      reader = 0x82e5cb0 <zend_stream_stdio_reader>, closer = 0x82e5c80 <zend_stream_stdio_closer>, fteller = 0x82e5c50 <zend_stream_stdio_fteller>, interactive = 0}}, free_filename = 0 '\0'}
	retval = 589498915
	s = 0x0
	behavior = 1
	no_headers = 0
	orig_optind = 1
	orig_optarg = 0x0
	script_file = 0x0
	ini_entries_len = 188268120
	max_requests = 500
	requests = 74
	fastcgi = 1
	bindpath = 0x0
	fcgi_fd = 188268120
	request = {listen_socket = 0, fd = 3, id = 1, keep = 0, in_len = 0, in_pad = 0, out_hdr = 0xbfc2ff64, 
  out_pos = 0xbfc2fffc ".\">ORGANISATION</a></li><li><dfn class=\"menu\">4:</dfn><a href=\"fachschaftsrat/\">FACHSCHAFTSRAT</a></li></ul>\n\t\t</div><!-- main_navi end -->\n\t\t<div id=\"metainfo\">\n\t\t\t<div class=\"contentWrap\"><a id=\"c82"..., 
  out_buf = "\001\006\000\001\000\b\000\000Status: 500 Internal Server Error\r\nSet-Cookie: fe_typo_user=90abe5c6e8b1d52656e5d3df7dcc1243; path=/\r\nContent-type: text/html; charset=utf-8\r\n\r\n.\">ORGANISATION</a></li><li><dfn class=\"menu\">4:"..., reserved = '\0' <repeats 15 times>, env = {nTableSize = <error type>, nTableMask = <error type>, nNumOfElements = <error type>, 
    nNextFreeElement = <error type>, pInternalPointer = 0x879e128, pListHead = 0x879e128, pListTail = 0x8c3b290, arBuckets = 0x8864eb8, pDestructor = 0x8346fc0 <fcgi_free_var>, 
    persistent = 1 '\001', nApplyCount = 0 '\0', bApplyProtection = 1 '\001'}}
	repeats = 1
	benchmark = 0
	start = {tv_sec = 134812552, tv_usec = -1216388384}
	end = {tv_sec = 139624612, tv_usec = -1077731080}
	status = 0
	argc = 1
	argv = (char **) 0xbfc321a4
eax            0x23230a23	589498915
ecx            0x23230a23	589498915
edx            0x498d0a4b	1233979979
ebx            0x85280a4	139624612
esp            0xbfc2b7a0	0xbfc2b7a0
ebp            0xbfc2b7c8	0xbfc2b7c8
esi            0x498d0a4b	1233979979
edi            0xa08	2568
eip            0x82dd987	0x82dd987 <_zend_hash_add_or_update+279>
eflags         0x210202	[ IF RF ID ]
cs             0x73	115
ss             0x7b	123
ds             0x7b	123
es             0x7b	123
fs             0x0	0
gs             0x33	51
0x82dd987 <_zend_hash_add_or_update+279>:	cmp    %esi,(%ecx)
0x82dd989 <_zend_hash_add_or_update+281>:	jne    0x82dd970 <_zend_hash_add_or_update+256>
0x82dd98b <_zend_hash_add_or_update+283>:	mov    0x10(%ebp),%edi
0x82dd98e <_zend_hash_add_or_update+286>:	cmp    %edi,0x4(%ecx)
0x82dd991 <_zend_hash_add_or_update+289>:	jne    0x82dd970 <_zend_hash_add_or_update+256>
0x82dd993 <_zend_hash_add_or_update+291>:	mov    %ecx,%esi
0x82dd995 <_zend_hash_add_or_update+293>:	mov    0x10(%ebp),%ecx
0x82dd998 <_zend_hash_add_or_update+296>:	add    $0x20,%esi
0x82dd99b <_zend_hash_add_or_update+299>:	cmp    %edi,%edi
0x82dd99d <_zend_hash_add_or_update+301>:	mov    0xc(%ebp),%edi
0x82dd9a0 <_zend_hash_add_or_update+304>:	repz cmpsb %es:(%edi),%ds:(%esi)
0x82dd9a2 <_zend_hash_add_or_update+306>:	jne    0x82dd970 <_zend_hash_add_or_update+256>
0x82dd9a4 <_zend_hash_add_or_update+308>:	testb  $0x2,0x20(%ebp)
0x82dd9a8 <_zend_hash_add_or_update+312>:	jne    0x82dd88c <_zend_hash_add_or_update+28>
0x82dd9ae <_zend_hash_add_or_update+318>:	mov    -0x1ac(%ebx),%eax
0x82dd9b4 <_zend_hash_add_or_update+324>:	mov    (%eax),%eax

Thread 1 (process 28148):
#0  0x082dd987 in _zend_hash_add_or_update (ht=0x8fd9b68, arKey=0x8fe30ac "REMOTE_ADDR", nKeyLength=<error type>, pData=0xbfc2b844, nDataSize=<error type>, pDest=0xbfc2b840, flag=1)
    at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:404
#1  0x082953d5 in php_register_variable_ex (var=0x8fe30ac "REMOTE_ADDR", val=0xbfc2b8a8, track_vars_array=0x8fd9b7c) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.h:340
#2  0x080fc56a in php_sapi_filter (arg=4, var=0xb6590c3b "REMOTE_ADDR", val=0xbfc2b92c, val_len=<error type>, new_val_len=0x0) at /tmp/buildd/php5-5.2.6.dfsg.1/ext/filter/filter.c:421
#3  0xb6582787 in suhosin_input_filter_wrapper () from /usr/lib/php5/20060613+lfs/suhosin.so
#4  0x0828edca in sapi_getenv (name=0xb6590c3b "REMOTE_ADDR", name_len=<error type>) at /tmp/buildd/php5-5.2.6.dfsg.1/main/SAPI.c:950
#5  0xb6585c21 in suhosin_log () from /usr/lib/php5/20060613+lfs/suhosin.so
#6  0x082dacf3 in zend_hash_check_destructor (pDestructor=0x9da0224) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:305
#7  0x082db11f in zend_hash_destroy (ht=0x8626648) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:710
#8  0x082ed2c3 in zend_object_std_dtor (object=0xc68decc) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects.c:45
#9  0x082ed302 in zend_objects_free_object_storage (object=0xc68decc) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects.c:122
#10 0x082f0440 in zend_objects_store_free_object_storage (objects=0x8551a68) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects_API.c:89
#11 0x082c4ff3 in shutdown_executor () at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:299
#12 0x082d051f in zend_deactivate () at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend.c:941
#13 0x08286698 in php_request_shutdown (dummy=0x0) at /tmp/buildd/php5-5.2.6.dfsg.1/main/main.c:1494
#14 0x0834ab15 in main (argc=1, argv=0xbfc321a4) at /tmp/buildd/php5-5.2.6.dfsg.1/sapi/cgi/cgi_main.c:2017




Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#584885; Package php5-cgi. (Fri, 11 Jun 2010 12:12:03 GMT) (full text, mbox, link).


Acknowledgement sent to Ralf Hildebrandt <Ralf.Hildebrandt@charite.de>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 11 Jun 2010 12:12:03 GMT) (full text, mbox, link).


Message #15 received at 584885@bugs.debian.org (full text, mbox, reply):

From: Ralf Hildebrandt <Ralf.Hildebrandt@charite.de>
To: 584885@bugs.debian.org
Subject: New backtrace
Date: Fri, 11 Jun 2010 14:08:22 +0200
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
Reading symbols from /lib/i686/cmov/libcrypt.so.1...done.
Loaded symbols for /lib/i686/cmov/libcrypt.so.1
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /usr/lib/i686/cmov/libssl.so.0.9.8...done.
Loaded symbols for /usr/lib/i686/cmov/libssl.so.0.9.8
Reading symbols from /usr/lib/libdb-4.6.so...done.
Loaded symbols for /usr/lib/libdb-4.6.so
Reading symbols from /lib/libbz2.so.1.0...done.
Loaded symbols for /lib/libbz2.so.1.0
Reading symbols from /usr/lib/libpcre.so.3...done.
Loaded symbols for /usr/lib/libpcre.so.3
Reading symbols from /lib/i686/cmov/libresolv.so.2...done.
Loaded symbols for /lib/i686/cmov/libresolv.so.2
Reading symbols from /lib/i686/cmov/libm.so.6...done.
Loaded symbols for /lib/i686/cmov/libm.so.6
Reading symbols from /lib/i686/cmov/libdl.so.2...done.
Loaded symbols for /lib/i686/cmov/libdl.so.2
Reading symbols from /lib/i686/cmov/libnsl.so.1...done.
Loaded symbols for /lib/i686/cmov/libnsl.so.1
Reading symbols from /usr/lib/libgssapi_krb5.so.2...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /usr/lib/libk5crypto.so.3...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /lib/libcom_err.so.2...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libxml2.so.2...done.
Loaded symbols for /usr/lib/libxml2.so.2
Reading symbols from /lib/i686/cmov/libc.so.6...done.
Loaded symbols for /lib/i686/cmov/libc.so.6
Reading symbols from /usr/lib/i686/cmov/libcrypto.so.0.9.8...done.
Loaded symbols for /usr/lib/i686/cmov/libcrypto.so.0.9.8
Reading symbols from /lib/i686/cmov/libpthread.so.0...done.
Loaded symbols for /lib/i686/cmov/libpthread.so.0
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/lib/libkrb5support.so.0...done.
Loaded symbols for /usr/lib/libkrb5support.so.0
Reading symbols from /lib/libkeyutils.so.1...done.
Loaded symbols for /lib/libkeyutils.so.1
Reading symbols from /usr/lib/php5/20060613+lfs/apc.so...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/apc.so
Reading symbols from /lib/i686/cmov/librt.so.1...done.
Loaded symbols for /lib/i686/cmov/librt.so.1
Reading symbols from /usr/lib/php5/20060613+lfs/curl.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/curl.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/curl.so
Reading symbols from /usr/lib/libcurl.so.4...done.
Loaded symbols for /usr/lib/libcurl.so.4
Reading symbols from /usr/lib/libidn.so.11...done.
Loaded symbols for /usr/lib/libidn.so.11
Reading symbols from /usr/lib/libssh2.so.1...done.
Loaded symbols for /usr/lib/libssh2.so.1
Reading symbols from /usr/lib/liblber-2.4.so.2...done.
Loaded symbols for /usr/lib/liblber-2.4.so.2
Reading symbols from /usr/lib/libldap_r-2.4.so.2...done.
Loaded symbols for /usr/lib/libldap_r-2.4.so.2
Reading symbols from /usr/lib/libgcrypt.so.11...done.
Loaded symbols for /usr/lib/libgcrypt.so.11
Reading symbols from /usr/lib/libgpg-error.so.0...done.
Loaded symbols for /usr/lib/libgpg-error.so.0
Reading symbols from /usr/lib/libsasl2.so.2...done.
Loaded symbols for /usr/lib/libsasl2.so.2
Reading symbols from /usr/lib/libgnutls.so.26...done.
Loaded symbols for /usr/lib/libgnutls.so.26
Reading symbols from /usr/lib/libtasn1.so.3...done.
Loaded symbols for /usr/lib/libtasn1.so.3
Reading symbols from /usr/lib/php5/20060613+lfs/gd.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/gd.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/gd.so
Reading symbols from /usr/lib/libgd.so.2...done.
Loaded symbols for /usr/lib/libgd.so.2
Reading symbols from /usr/lib/libt1.so.5...done.
Loaded symbols for /usr/lib/libt1.so.5
Reading symbols from /usr/lib/libfreetype.so.6...done.
Loaded symbols for /usr/lib/libfreetype.so.6
Reading symbols from /usr/lib/libX11.so.6...done.
Loaded symbols for /usr/lib/libX11.so.6
Reading symbols from /usr/lib/libXpm.so.4...done.
Loaded symbols for /usr/lib/libXpm.so.4
Reading symbols from /usr/lib/libpng12.so.0...done.
Loaded symbols for /usr/lib/libpng12.so.0
Reading symbols from /usr/lib/libjpeg.so.62...done.
Loaded symbols for /usr/lib/libjpeg.so.62
Reading symbols from /usr/lib/libfontconfig.so.1...done.
Loaded symbols for /usr/lib/libfontconfig.so.1
Reading symbols from /usr/lib/libxcb-xlib.so.0...done.
Loaded symbols for /usr/lib/libxcb-xlib.so.0
Reading symbols from /usr/lib/libxcb.so.1...done.
Loaded symbols for /usr/lib/libxcb.so.1
Reading symbols from /usr/lib/libexpat.so.1...done.
Loaded symbols for /usr/lib/libexpat.so.1
Reading symbols from /usr/lib/libXau.so.6...done.
Loaded symbols for /usr/lib/libXau.so.6
Reading symbols from /usr/lib/libXdmcp.so.6...done.
Loaded symbols for /usr/lib/libXdmcp.so.6
Reading symbols from /usr/lib/php5/20060613+lfs/mcrypt.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/mcrypt.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mcrypt.so
Reading symbols from /usr/lib/libmcrypt.so.4...done.
Loaded symbols for /usr/lib/libmcrypt.so.4
Reading symbols from /usr/lib/libltdl.so.3...done.
Loaded symbols for /usr/lib/libltdl.so.3
Reading symbols from /usr/lib/php5/20060613+lfs/mhash.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/mhash.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mhash.so
Reading symbols from /usr/lib/libmhash.so.2...done.
Loaded symbols for /usr/lib/libmhash.so.2
Reading symbols from /usr/lib/php5/20060613+lfs/mysql.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/mysql.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mysql.so
Reading symbols from /usr/lib/libmysqlclient_r.so.15...done.
Loaded symbols for /usr/lib/libmysqlclient_r.so.15
Reading symbols from /usr/lib/php5/20060613+lfs/mysqli.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/mysqli.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/mysqli.so
Reading symbols from /usr/lib/php5/20060613+lfs/pspell.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/pspell.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/pspell.so
Reading symbols from /usr/lib/libaspell.so.15...done.
Loaded symbols for /usr/lib/libaspell.so.15
Reading symbols from /usr/lib/libpspell.so.15...done.
Loaded symbols for /usr/lib/libpspell.so.15
Reading symbols from /usr/lib/libstdc++.so.6...done.
Loaded symbols for /usr/lib/libstdc++.so.6
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /usr/lib/php5/20060613+lfs/recode.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/recode.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/recode.so
Reading symbols from /usr/lib/librecode.so.0...done.
Loaded symbols for /usr/lib/librecode.so.0
Reading symbols from /usr/lib/php5/20060613+lfs/suhosin.so...done.
Loaded symbols for /usr/lib/php5/20060613+lfs/suhosin.so
Reading symbols from /usr/lib/php5/20060613+lfs/xmlrpc.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/xmlrpc.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/xmlrpc.so
Reading symbols from /usr/lib/php5/20060613+lfs/xsl.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613+lfs/xsl.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613+lfs/xsl.so
Reading symbols from /usr/lib/libexslt.so.0...done.
Loaded symbols for /usr/lib/libexslt.so.0
Reading symbols from /usr/lib/libxslt.so.1...done.
Loaded symbols for /usr/lib/libxslt.so.1
Reading symbols from /lib/i686/cmov/libnss_files.so.2...done.
Loaded symbols for /lib/i686/cmov/libnss_files.so.2
Core was generated by `/usr/bin/php5-cgi'.
Program terminated with signal 11, Segmentation fault.
[New process 19173]
#0  0x082dd987 in _zend_hash_add_or_update (ht=0x98c4428, arKey=0x98cd434 "SCRIPT_FILENAME", nKeyLength=<error type>, pData=0xbfaf56d4, 
    nDataSize=<error type>, pDest=0xbfaf56d0, flag=1) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:404
	in /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c
#0  0x082dd987 in _zend_hash_add_or_update (ht=0x98c4428, arKey=0x98cd434 "SCRIPT_FILENAME", nKeyLength=<error type>, pData=0xbfaf56d4, 
    nDataSize=<error type>, pDest=0xbfaf56d0, flag=1) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:404
	h = <error type>
#1  0x082953d5 in php_register_variable_ex (var=0x98cd434 "SCRIPT_FILENAME", val=0xbfaf5738, track_vars_array=0x98c443c)
    at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.h:340
	ip = 0x95a3ed4 "ÄG\210·"
	index = 0x98cd434 "SCRIPT_FILENAME"
	escaped_index = 0x10 <Address 0x10 out of bounds>
	var_len = 15
	index_len = 15
	gpc_element = (zval *) 0x98cd2c0
	gpc_element_p = (zval **) 0xb1645ec
	is_array = 0 '\0'
	symtable1 = (HashTable *) 0x98c4428
#2  0x080fc56a in php_sapi_filter (arg=4, var=0xb6616c72 "SCRIPT_FILENAME", val=0xbfaf57bc, val_len=<error type>, new_val_len=0x0)
    at /tmp/buildd/php5-5.2.6.dfsg.1/ext/filter/filter.c:421
	new_var = {value = {lval = 186009068, dval = 5.1019799673480284e-313, str = {val = 0xb1645ec "/var/www/typo3/index.php", len = 24}, 
    ht = 0xb1645ec, obj = {handle = <error type>, handlers = 0x18}}, refcount = <error type>, type = 6 '\006', is_ref = 108 'l'}
	raw_var = {value = {lval = 186009232, dval = 5.101979975450705e-313, str = {val = 0xb164690 "/var/www/typo3/index.php", len = 24}, 
    ht = 0xb164690, obj = {handle = <error type>, handlers = 0x18}}, refcount = <error type>, type = 6 '\006', is_ref = 0 '\0'}
	array_ptr = (zval *) 0x9a4e118
	orig_array_ptr = (zval *) 0x98c443c
	orig_var = 0x98cd434 "SCRIPT_FILENAME"
	retval = 0
	arg = 1702245236
#3  0xb6608787 in suhosin_input_filter_wrapper () from /usr/lib/php5/20060613+lfs/suhosin.so
No symbol table info available.
#4  0x0828edca in sapi_getenv (name=0xb6616c72 "SCRIPT_FILENAME", name_len=<error type>) at /tmp/buildd/php5-5.2.6.dfsg.1/main/SAPI.c:950
	value = 0xb1646f8 "/var/www/typo3/index.php"
	tmp = 0x65763374 <Address 0x65763374 out of bounds>
	value = 0xb1646f8 "/var/www/typo3/index.php"
#5  0xb660be80 in suhosin_log () from /usr/lib/php5/20060613+lfs/suhosin.so
No symbol table info available.
#6  0x082dacf3 in zend_hash_check_destructor (pDestructor=0x9fdad3c) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:305
	left = 1702245236
	right = 15
	found = 0 '\0'
	right = 15
	found = 0 '\0'
#7  0x082db11f in zend_hash_destroy (ht=0x9540650) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:710
	p = (Bucket *) 0xd6d2aec
	ht = (HashTable *) 0x9540650
#8  0x082ed2c3 in zend_object_std_dtor (object=0xd6d2aec) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects.c:45
	object = (zend_object *) 0xd6d2aec
#9  0x082ed302 in zend_objects_free_object_storage (object=0xd6d2aec) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects.c:122
	object = (zend_object *) 0xd6d2aec
#10 0x082f0440 in zend_objects_store_free_object_storage (objects=0x8551a68) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects_API.c:89
	i = <error type>
#11 0x082c4ff3 in shutdown_executor () at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:299
	__orig_bailout = (jmp_buf *) 0xbfafbe2c
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0xbfafbe2c
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__bailout = {{__jmpbuf = {139624612, 137164960, 139795016, -1079010504, 1261756545, 1285423086}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
#12 0x082d051f in zend_deactivate () at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend.c:941
	__orig_bailout = (jmp_buf *) 0xbfafbe2c
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1079010312, 1261863041, 1309278702}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0xbfafbe2c
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1079010312, 1261863041, 1309278702}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0x98c4704
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1079010312, 1261863041, 1309278702}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0x158
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1079010312, 1261863041, 1309278702}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0x98c4704
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1079010312, 1261863041, 1309278702}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	__orig_bailout = (jmp_buf *) 0xbfafbe2c
	__bailout = {{__jmpbuf = {139624612, 139793312, 139793528, -1079010312, 1261863041, 1309278702}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
#13 0x08286698 in php_request_shutdown (dummy=0x0) at /tmp/buildd/php5-5.2.6.dfsg.1/main/main.c:1494
	report_memleaks = 1 '\001'
#14 0x0834ab15 in main (argc=1, argv=0xbfafc034) at /tmp/buildd/php5-5.2.6.dfsg.1/sapi/cgi/cgi_main.c:2017
	__bailout = {{__jmpbuf = {139624612, 139547886, 139547864, -1079001192, 1262067841, 2100648942}, __mask_was_saved = 0, __saved_mask = {
      __val = 0x1c}}}
	free_query_string = 0
	exit_status = 0
	cgi = 0
	c = 1702245236
	i = 190636736
	len = 190636736
	file_handle = {type = 2 '\002', filename = 0x98bd4a4 "", opened_path = 0x0, handle = {fd = 162943352, fp = 0x9b65178, stream = {
      handle = 0x9b65178, reader = 0x82e5cb0 <zend_stream_stdio_reader>, closer = 0x82e5c80 <zend_stream_stdio_closer>, 
      fteller = 0x82e5c50 <zend_stream_stdio_fteller>, interactive = 0}}, free_filename = 0 '\0'}
	retval = 1702245236
	s = 0x0
	behavior = 1
	no_headers = 0
	orig_optind = 1
	orig_optarg = 0x0
	script_file = 0x0
	ini_entries_len = 190636736
	max_requests = 500
	requests = 398
	fastcgi = 1
	bindpath = 0x0
	fcgi_fd = 190636736
	request = {listen_socket = 0, fd = 3, id = 1, keep = 0, in_len = 0, in_pad = 0, out_hdr = 0xbfaf9df4, 
  out_pos = 0xbfaf9e49 "ktuelles/\">AKTUELLES</a></li><li><dfn class=\"menu\">3:</dfn><a href=\"projekte/\">PROJEKTE</a></li><li><dfn class=\"menu\">4:</dfn><a href=\"graduiertenkolleg/\">GRADUIERTENKOLLEG</a></li></ul>\n\t\t</div><!-- "..., 
  out_buf = "\001\006\000\001\000\b\000\000Status: 500 Internal Server Error\r\nContent-type: text/html; charset=utf-8\r\n\r\nktuelles/\">AKTUELLES</a></li><li><dfn class=\"menu\">3:</dfn><a href=\"projekte/\">PROJEKTE</a></li><li><dfn class=\"men"..., reserved = '\0' <repeats 15 times>, 
  env = {nTableSize = <error type>, nTableMask = <error type>, nNumOfElements = <error type>, nNextFreeElement = <error type>, 
    pInternalPointer = 0x96b5c70, pListHead = 0x96b5c70, pListTail = 0x9d64b98, arBuckets = 0x9cf3830, pDestructor = 0x8346fc0 <fcgi_free_var>, 
    persistent = 1 '\001', nApplyCount = 0 '\0', bApplyProtection = 1 '\001'}}
	repeats = 1
	benchmark = 0
	start = {tv_sec = 134812552, tv_usec = -1215839520}
	end = {tv_sec = 139624612, tv_usec = -1079001208}
	status = 0
	argc = 1
	argv = (char **) 0xbfafc034
eax            0x65763374	1702245236
ecx            0x65763374	1702245236
edx            0x0	0
ebx            0x85280a4	139624612
esp            0xbfaf5630	0xbfaf5630
ebp            0xbfaf5658	0xbfaf5658
esi            0x537c323a	1400648250
edi            0x28	40
eip            0x82dd987	0x82dd987 <_zend_hash_add_or_update+279>
eflags         0x210206	[ PF IF RF ID ]
cs             0x73	115
ss             0x7b	123
ds             0x7b	123
es             0x7b	123
fs             0x0	0
gs             0x33	51
0x82dd987 <_zend_hash_add_or_update+279>:	cmp    %esi,(%ecx)
0x82dd989 <_zend_hash_add_or_update+281>:	jne    0x82dd970 <_zend_hash_add_or_update+256>
0x82dd98b <_zend_hash_add_or_update+283>:	mov    0x10(%ebp),%edi
0x82dd98e <_zend_hash_add_or_update+286>:	cmp    %edi,0x4(%ecx)
0x82dd991 <_zend_hash_add_or_update+289>:	jne    0x82dd970 <_zend_hash_add_or_update+256>
0x82dd993 <_zend_hash_add_or_update+291>:	mov    %ecx,%esi
0x82dd995 <_zend_hash_add_or_update+293>:	mov    0x10(%ebp),%ecx
0x82dd998 <_zend_hash_add_or_update+296>:	add    $0x20,%esi
0x82dd99b <_zend_hash_add_or_update+299>:	cmp    %edi,%edi
0x82dd99d <_zend_hash_add_or_update+301>:	mov    0xc(%ebp),%edi
0x82dd9a0 <_zend_hash_add_or_update+304>:	repz cmpsb %es:(%edi),%ds:(%esi)
0x82dd9a2 <_zend_hash_add_or_update+306>:	jne    0x82dd970 <_zend_hash_add_or_update+256>
0x82dd9a4 <_zend_hash_add_or_update+308>:	testb  $0x2,0x20(%ebp)
0x82dd9a8 <_zend_hash_add_or_update+312>:	jne    0x82dd88c <_zend_hash_add_or_update+28>
0x82dd9ae <_zend_hash_add_or_update+318>:	mov    -0x1ac(%ebx),%eax
0x82dd9b4 <_zend_hash_add_or_update+324>:	mov    (%eax),%eax

Thread 1 (process 19173):
#0  0x082dd987 in _zend_hash_add_or_update (ht=0x98c4428, arKey=0x98cd434 "SCRIPT_FILENAME", nKeyLength=<error type>, pData=0xbfaf56d4, 
    nDataSize=<error type>, pDest=0xbfaf56d0, flag=1) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:404
#1  0x082953d5 in php_register_variable_ex (var=0x98cd434 "SCRIPT_FILENAME", val=0xbfaf5738, track_vars_array=0x98c443c)
    at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.h:340
#2  0x080fc56a in php_sapi_filter (arg=4, var=0xb6616c72 "SCRIPT_FILENAME", val=0xbfaf57bc, val_len=<error type>, new_val_len=0x0)
    at /tmp/buildd/php5-5.2.6.dfsg.1/ext/filter/filter.c:421
#3  0xb6608787 in suhosin_input_filter_wrapper () from /usr/lib/php5/20060613+lfs/suhosin.so
#4  0x0828edca in sapi_getenv (name=0xb6616c72 "SCRIPT_FILENAME", name_len=<error type>) at /tmp/buildd/php5-5.2.6.dfsg.1/main/SAPI.c:950
#5  0xb660be80 in suhosin_log () from /usr/lib/php5/20060613+lfs/suhosin.so
#6  0x082dacf3 in zend_hash_check_destructor (pDestructor=0x9fdad3c) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:305
#7  0x082db11f in zend_hash_destroy (ht=0x9540650) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_hash.c:710
#8  0x082ed2c3 in zend_object_std_dtor (object=0xd6d2aec) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects.c:45
#9  0x082ed302 in zend_objects_free_object_storage (object=0xd6d2aec) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects.c:122
#10 0x082f0440 in zend_objects_store_free_object_storage (objects=0x8551a68) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_objects_API.c:89
#11 0x082c4ff3 in shutdown_executor () at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:299
#12 0x082d051f in zend_deactivate () at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend.c:941
#13 0x08286698 in php_request_shutdown (dummy=0x0) at /tmp/buildd/php5-5.2.6.dfsg.1/main/main.c:1494
#14 0x0834ab15 in main (argc=1, argv=0xbfafc034) at /tmp/buildd/php5-5.2.6.dfsg.1/sapi/cgi/cgi_main.c:2017




Reply sent to Ondřej Surý <ondrej@sury.org>:
You have taken responsibility. (Wed, 27 Apr 2011 08:34:33 GMT) (full text, mbox, link).


Notification sent to Ralf Hildebrandt <ralf.hildebrandt@charite.de>:
Bug acknowledged by developer. (Wed, 27 Apr 2011 08:34:34 GMT) (full text, mbox, link).


Message #20 received at 584885-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: 465081-done@bugs.debian.org, 537794-done@bugs.debian.org, 553048-done@bugs.debian.org, 574610-done@bugs.debian.org, 584885-done@bugs.debian.org, 584957-done@bugs.debian.org, 594613-done@bugs.debian.org, 493045-done@bugs.debian.org, 549492-done@bugs.debian.org, 450581-done@bugs.debian.org, 502174-done@bugs.debian.org, 543177-done@bugs.debian.org, 547134-done@bugs.debian.org, 552089-done@bugs.debian.org, 556523-done@bugs.debian.org, 559273-done@bugs.debian.org, 576147-done@bugs.debian.org, 578754-done@bugs.debian.org, 601602-done@bugs.debian.org, 609355-done@bugs.debian.org, 419649-done@bugs.debian.org, 442063-done@bugs.debian.org, 500567-done@bugs.debian.org, 513429-done@bugs.debian.org, 528600-done@bugs.debian.org, 597650-done@bugs.debian.org, 603641-done@bugs.debian.org, 405067-done@bugs.debian.org, 430397-done@bugs.debian.org, 440775-done@bugs.debian.org, 591759-done@bugs.debian.org, 565387-done@bugs.debian.org, 507762-done@bugs.debian.org, 529278-done@bugs.debian.org, 556459-done@bugs.debian.org
Subject: Closing segfaults (and some other minor bugs) for version older than squeeze (5.3.3)
Date: Wed, 27 Apr 2011 10:28:24 +0200
Version: 5.3.3-7

Hi,

since lenny is oldstable it will not get any updates now (except
security)[1], I am closing all segfault bugs filled against php5 in
lenny. (This is kind of saying that we don't care much about php5 in
lenny anymore).

If you believe the bug is still there, please provide evidence[2] and
a (preferably complete) test case with up-to-date squeeze (and/or
testing or unstable) version of php5 and reopen the bug.

O.
1. http://wiki.debian.org/PHP#Notes_on_PHP_and_security
2. Install php5-dbg and provide backtrace:
http://bugs.php.net/bugs-generating-backtrace.php
-- 
Ondřej Surý <ondrej@sury.org>




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 26 May 2011 07:41:14 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 01:15:02 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.