Debian Bug report logs -
#599861
/etc/php5/cli/php.ini not updated to show switch to ulimit for memory_limit
Reported by: Ben Holt <ben@computerdolt.com>
Date: Mon, 11 Oct 2010 21:03:02 UTC
Severity: normal
Found in version php5/5.2.6.dfsg.1-1+lenny9
Fixed in version php5/5.4.4-7
Done: Ondřej Surý <ondrej@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#599861; Package php5-cli.
(Mon, 11 Oct 2010 21:03:04 GMT) (full text, mbox, link).
Acknowledgement sent
to Ben Holt <ben@computerdolt.com>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>.
(Mon, 11 Oct 2010 21:03:04 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Package: php5-cli
Version: 5.2.6.dfsg.1-1+lenny9
PHP5 cli has been changed to depend on ulimit for setting the maximum
amount of memory that can be consumed by a script. The stock
/etc/php5/cli/php.ini still contains the memory_limit setting with no
indication that it is no longer being used. A comment should be added
to indicate this change and, perhaps, to provide some usage instructions
for ulimit as users may not find it in the bash man page.
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#599861; Package php5-cli.
(Fri, 15 Apr 2011 20:12:06 GMT) (full text, mbox, link).
Acknowledgement sent
to Francois Beaulieu <francois.beaulieu@securebyknowledge.com>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>.
(Fri, 15 Apr 2011 20:12:06 GMT) (full text, mbox, link).
Message #10 received at 599861@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Bug still present in squeeze and testing.
However, the value of memory_limit in /etc/php5/cli/php.ini appears to still be checked by suhosin. In fact, that the stock /etc/php5/cli/php.ini contains memory_limit=-1 is causing sohosin to generate many log messages.
(See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566609 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=582384)
We would need to confirm that ulimit is truly the new functioning memory-limiting mechanism and have php5-suhosin be modified to reflect that.
--
François Beaulieu, CISSP
Conseiller principal / Senior Consultant
Secure by Knowledge
+1 (514) 667-0691 ext 2061
francois.beaulieu@securebyknowledge.com<mailto:francois.beaulieu@securebyknowledge.com>
[Message part 2 (text/html, inline)]
Marked as fixed in versions php5/5.4.4-7.
Request was from Ondřej Surý <ondrej@debian.org>
to control@bugs.debian.org.
(Wed, 09 Jul 2014 09:03:22 GMT) (full text, mbox, link).
Marked Bug as done
Request was from Ondřej Surý <ondrej@debian.org>
to control@bugs.debian.org.
(Wed, 09 Jul 2014 09:03:23 GMT) (full text, mbox, link).
Notification sent
to Ben Holt <ben@computerdolt.com>:
Bug acknowledged by developer.
(Wed, 09 Jul 2014 09:03:24 GMT) (full text, mbox, link).
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Thu, 07 Aug 2014 07:33:16 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Sun Jul 2 03:39:53 2023;
Machine Name:
bembo
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.