Debian Bug report logs - #696626
libapache2-mod-php5: infinite recursion in rfc1867_post_handler when trying to preview/commit a mediawiki edit

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Nye Liu <nyet@nyet.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: libapache2-mod-php5: infinite recursion in rfc1867_post_handler when trying to preview/commit a mediawiki edit

Date: Mon, 24 Dec 2012 00:33:02 -0800

Package: libapache2-mod-php5
Version: 5.4.4-11
Severity: normal

Dear Maintainer,

After running apache for a while, previewing or commiting a mediawiki edit
causes a child segfault:

[notice] child pid 23263 exit signal Segmentation fault (11), possible coredump in /var/tmp/apache2-gdb-dump

When analyzing the coredump, the backtrace is 87k+ calls deep. The bt looks
like this:

#1 0x00007fbe62b3623b in ?? () from /usr/lib/apache2/modules/libphp5.so
..... 87k lines omitted :)
#87241 0x00007fbe62b3623b in ?? () from /usr/lib/apache2/modules/libphp5.so
#87242 0x00007fbe62b3623b in ?? () from /usr/lib/apache2/modules/libphp5.so
#87243 0x00007fbe62b3623b in ?? () from /usr/lib/apache2/modules/libphp5.so
#87244 0x00007fbe62b3623b in ?? () from /usr/lib/apache2/modules/libphp5.so
#87245 0x00007fbe62c3b014 in rfc1867_post_handler ()
   from /usr/lib/apache2/modules/libphp5.so
#87246 0x00007fbe62c388f3 in sapi_handle_post ()
   from /usr/lib/apache2/modules/libphp5.so
#87247 0x00007fbe62c3f9b8 in php_default_treat_data ()
   from /usr/lib/apache2/modules/libphp5.so
#87248 0x00007fbe62af260d in mbstr_treat_data ()
   from /usr/lib/apache2/modules/libphp5.so
#87249 0x00007fbe62c3e50c in ?? () from /usr/lib/apache2/modules/libphp5.so
#87250 0x00007fbe62c6dbab in ?? () from /usr/lib/apache2/modules/libphp5.so
#87251 0x00007fbe62c9eea5 in zend_hash_apply ()
   from /usr/lib/apache2/modules/libphp5.so
#87252 0x00007fbe62c3fd1e in ?? () from /usr/lib/apache2/modules/libphp5.so
#87253 0x00007fbe62c30285 in php_request_startup ()
---Type <return> to continue, or q <return> to quit---
   from /usr/lib/apache2/modules/libphp5.so
#87254 0x00007fbe62d3b23b in ?? () from /usr/lib/apache2/modules/libphp5.so
#87255 0x00007fbe6733db50 in ap_run_handler (r=0x7fbe6171f0a0) at config.c:159
#87256 0x00007fbe6733df9b in ap_invoke_handler (r=r@entry=0x7fbe6171f0a0)
    at config.c:377
#87257 0x00007fbe6734e078 in ap_process_request (r=r@entry=0x7fbe6171f0a0)
    at http_request.c:282
#87258 0x00007fbe6734af38 in ap_process_http_connection (c=0x7fbe643ee290)
    at http_core.c:190
#87259 0x00007fbe67344510 in ap_run_process_connection (c=0x7fbe643ee290)
    at connection.c:43
#87260 0x00007fbe673448f8 in ap_process_connection (c=c@entry=0x7fbe643ee290, 
    csd=<optimized out>) at connection.c:190
#87261 0x00007fbe67352c2e in child_main (child_num_arg=child_num_arg@entry=31)
    at prefork.c:667
#87262 0x00007fbe67353382 in make_child (slot=31, s=0x7fbe672ab818)
    at prefork.c:768
#87263 make_child (s=0x7fbe672ab818, slot=31) at prefork.c:696
#87264 0x00007fbe67353ee6 in perform_idle_server_maintenance (
    p=<optimized out>) at prefork.c:903
#87265 ap_mpm_run (_pconf=_pconf@entry=0x7fbe672ea028, plog=<optimized out>, 
    s=s@entry=0x7fbe672ab818) at prefork.c:1107
#87266 0x00007fbe67328826 in main (argc=3, argv=0x7fffa99edc68) at main.c:755


-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.35.4-rscloud (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libapache2-mod-php5 depends on:
ii  apache2-mpm-prefork  2.2.22-12
ii  apache2.2-common     2.2.22-12
ii  libbz2-1.0           1.0.6-4
ii  libc6                2.13-37
ii  libcomerr2           1.42.5-1
ii  libdb5.1             5.1.29-5
ii  libgssapi-krb5-2     1.10.1+dfsg-3
ii  libk5crypto3         1.10.1+dfsg-3
ii  libkrb5-3            1.10.1+dfsg-3
ii  libmagic1            5.11-2
ii  libonig2             5.9.1-1
ii  libpcre3             1:8.31-1
ii  libqdbm14            1.8.78-2
ii  libssl1.0.0          1.0.1c-4
ii  libstdc++6           4.7.2-4
ii  libxml2              2.8.0+dfsg1-7
ii  mime-support         3.52-2
ii  php5-common          5.4.4-11
ii  tzdata               2012j-1
ii  ucf                  3.0025+nmu3
ii  zlib1g               1:1.2.7.dfsg-13

Versions of packages libapache2-mod-php5 recommends:
ii  php5-cli  5.4.4-11

Versions of packages libapache2-mod-php5 suggests:
ii  php-pear  5.4.4-11

-- no debconf information

Versions of mediawiki installed:
ii  mediawiki                           1:1.19.3-1
ii  mediawiki-extensions                2.10
ii  mediawiki-extensions-base           2.10
ii  mediawiki-extensions-collection     2.10
ii  mediawiki-extensions-confirmedit    2.10
ii  mediawiki-extensions-geshi          2.10
ii  mediawiki-extensions-graphviz       2.10
ii  mediawiki-extensions-ldapauth       2.10
ii  mediawiki-extensions-math           2:1.0+git20120528-6
ii  mediawiki-extensions-openid         2.10
ii  mediawiki-math                      2:1.0+git20120528-6
ii  mediawiki-math-texvc                2:1.0+git20120528-6

Message #10 received at 696626@bugs.debian.org (full text, mbox, reply):

From: Nye Liu <nyet@nyet.org>

To: 696626@bugs.debian.org

Subject: Bug#696626: (libapache2-mod-php5: infinite recursion in rfc1867_post_handler when trying to preview/commit a mediawiki edit)

Date: Mon, 24 Dec 2012 00:49:59 -0800

After installing the debug symbols, i get

#87243 0x00007fbe62b3623b in php_session_rfc1867_callback (event=0, event_data=0x7fffa99ebeb0, extra=0x7fffa99ebda0)
    at /tmp/buildd/php5-5.4.4/ext/session/session.c:2388
#87244 0x00007fbe62b3623b in php_session_rfc1867_callback (event=0, event_data=0x7fffa99ebeb0, extra=0x7fffa99ebda0)
    at /tmp/buildd/php5-5.4.4/ext/session/session.c:2388
#87245 0x00007fbe62c3b014 in rfc1867_post_handler (content_type_dup=0x7fbe67f8eea8 "\b", arg=0x7fbe68034730) at /tmp/buildd/php5-5.4.4/main/rfc1867.c:773

Probably a dup of bug #694473

Message #15 received at 696626-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@debian.org>

To: Nye Liu <nyet@nyet.org>, 696626-done@bugs.debian.org

Subject: Re: [php-maint] Bug#696626: (libapache2-mod-php5: infinite recursion in rfc1867_post_handler when trying to preview/commit a mediawiki edit)

Date: Fri, 3 May 2013 10:35:13 +0200

Version: 5.4.4-13

On Mon, Dec 24, 2012 at 9:49 AM, Nye Liu <nyet@nyet.org> wrote:
> Probably a dup of bug #694473

And thus marking as fixed. If this bug still happens with >= 5.4.4-13,
please provide a fresh backtrace.

Ondrej
--
Ondřej Surý <ondrej@sury.org>

Send a report that this bug log contains spam.