Debian Bug report logs - #599861
/etc/php5/cli/php.ini not updated to show switch to ulimit for memory_limit

version graph

Package: php5-cli; Maintainer for php5-cli is (unknown);

Reported by: Ben Holt <ben@computerdolt.com>

Date: Mon, 11 Oct 2010 21:03:02 UTC

Severity: normal

Found in version php5/5.2.6.dfsg.1-1+lenny9

Fixed in version php5/5.4.4-7

Done: Ondřej Surý <ondrej@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#599861; Package php5-cli. (Mon, 11 Oct 2010 21:03:04 GMT) (full text, mbox, link).


Acknowledgement sent to Ben Holt <ben@computerdolt.com>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Mon, 11 Oct 2010 21:03:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Ben Holt <ben@computerdolt.com>
To: submit@bugs.debian.org
Subject: /etc/php5/cli/php.ini not updated to show switch to ulimit for memory_limit
Date: Mon, 11 Oct 2010 13:59:55 -0700
Package: php5-cli
Version: 5.2.6.dfsg.1-1+lenny9

PHP5 cli has been changed to depend on ulimit for setting the maximum 
amount of memory that can be consumed by a script.  The stock 
/etc/php5/cli/php.ini still contains the memory_limit setting with no 
indication that it is no longer being used.  A comment should be added 
to indicate this change and, perhaps, to provide some usage instructions 
for ulimit as users may not find it in the bash man page.




Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#599861; Package php5-cli. (Fri, 15 Apr 2011 20:12:06 GMT) (full text, mbox, link).


Acknowledgement sent to Francois Beaulieu <francois.beaulieu@securebyknowledge.com>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 15 Apr 2011 20:12:06 GMT) (full text, mbox, link).


Message #10 received at 599861@bugs.debian.org (full text, mbox, reply):

From: Francois Beaulieu <francois.beaulieu@securebyknowledge.com>
To: "599861@bugs.debian.org" <599861@bugs.debian.org>
Subject: Re: /etc/php5/cli/php.ini not updated to show switch to ulimit for memory_limit
Date: Fri, 15 Apr 2011 16:02:42 -0400
[Message part 1 (text/plain, inline)]
Bug still present in squeeze and testing.

However, the value of memory_limit in /etc/php5/cli/php.ini appears to still be checked by suhosin. In fact, that the stock /etc/php5/cli/php.ini contains memory_limit=-1 is causing sohosin to generate many log messages.

(See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566609 and  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=582384)

We would need to confirm that ulimit is truly the new functioning memory-limiting mechanism and have php5-suhosin be modified to reflect that.

--
François Beaulieu, CISSP
Conseiller principal / Senior Consultant
Secure by Knowledge
+1 (514) 667-0691 ext 2061
francois.beaulieu@securebyknowledge.com<mailto:francois.beaulieu@securebyknowledge.com>

[Message part 2 (text/html, inline)]

Marked as fixed in versions php5/5.4.4-7. Request was from Ondřej Surý <ondrej@debian.org> to control@bugs.debian.org. (Wed, 09 Jul 2014 09:03:22 GMT) (full text, mbox, link).


Marked Bug as done Request was from Ondřej Surý <ondrej@debian.org> to control@bugs.debian.org. (Wed, 09 Jul 2014 09:03:23 GMT) (full text, mbox, link).


Notification sent to Ben Holt <ben@computerdolt.com>:
Bug acknowledged by developer. (Wed, 09 Jul 2014 09:03:24 GMT) (full text, mbox, link).


Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 07 Aug 2014 07:33:16 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 03:39:53 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.