Debian Bug report logs - #753851
apache2: [core:notice] [pid 22446] AH00052: child pid 22554 exit signal Segmentation fault (11)

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Rainer Dorsch <ml@bokomoko.de>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: apache2: [core:notice] [pid 22446] AH00052: child pid 22554 exit signal Segmentation fault (11)

Date: Sat, 05 Jul 2014 17:48:16 +0000

Package: apache2
Version: 2.4.9-2
Severity: important


I run owncloud on apache2 (both from the Debian repo) on an armhf architecture. I get in /var/log/apache2/error.log

[Sat Jul 05 17:30:52.995799 2014] [access_compat:error] [pid 22488] [client 127.0.0.1:53985] AH01797: client denied by server configuration: /usr/share/owncloud/data/htaccesstest.txt

[Sat Jul 05 17:37:49.263440 2014] [core:notice] [pid 22446] AH00052: child pid 22451 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:49.263591 2014] [core:notice] [pid 22446] AH00052: child pid 22477 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:50.267390 2014] [core:notice] [pid 22446] AH00052: child pid 22454 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:50.267635 2014] [core:notice] [pid 22446] AH00052: child pid 22476 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:50.267708 2014] [core:notice] [pid 22446] AH00052: child pid 22478 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:50.267777 2014] [core:notice] [pid 22446] AH00052: child pid 22486 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:50.267851 2014] [core:notice] [pid 22446] AH00052: child pid 22554 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:50.267925 2014] [core:notice] [pid 22446] AH00052: child pid 22556 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:51.275593 2014] [core:notice] [pid 22446] AH00052: child pid 22572 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:52.291122 2014] [core:notice] [pid 22446] AH00052: child pid 22573 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:52.291363 2014] [core:notice] [pid 22446] AH00052: child pid 22574 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:53.321866 2014] [core:notice] [pid 22446] AH00052: child pid 22575 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:53.322095 2014] [core:notice] [pid 22446] AH00052: child pid 22576 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:53.322186 2014] [core:notice] [pid 22446] AH00052: child pid 22577 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:53.322270 2014] [core:notice] [pid 22446] AH00052: child pid 22578 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:54.323472 2014] [core:notice] [pid 22446] AH00052: child pid 22579 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:54.323617 2014] [core:notice] [pid 22446] AH00052: child pid 22580 exit signal Segmentation fault (11)
[Sat Jul 05 17:37:54.323686 2014] [core:notice] [pid 22446] AH00052: child pid 22586 exit signal Segmentation fault (11)

I followed 

/usr/share/doc/apache2/README.backtrace

but did not get a core file in /var/cache/apache2/.

I am happy to provide additional information.

Thanks,
Rainer


-- Package-specific info:

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (600, 'testing'), (300, 'unstable'), (250, 'experimental')
Architecture: armhf (armv7l)

Kernel: Linux 3.14-1-armmp (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_MESSAGES to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages apache2 depends on:
ii  apache2-bin   2.4.9-2
ii  apache2-data  2.4.9-2
ii  lsb-base      4.1+Debian13
ii  mime-support  3.56
ii  perl          5.18.2-4
ii  procps        1:3.3.9-5

Versions of packages apache2 recommends:
ii  ssl-cert  1.0.34

Versions of packages apache2 suggests:
pn  apache2-doc                                      <none>
pn  apache2-suexec-pristine | apache2-suexec-custom  <none>
pn  apache2-utils                                    <none>
pn  www-browser                                      <none>

Versions of packages apache2-bin depends on:
ii  libapr1                  1.5.1-2
ii  libaprutil1              1.5.3-2
ii  libaprutil1-dbd-sqlite3  1.5.3-2
ii  libaprutil1-ldap         1.5.3-2
ii  libc6                    2.19-4
ii  libldap-2.4-2            2.4.39-1
ii  liblua5.1-0              5.1.5-5
ii  libpcre3                 1:8.31-5
ii  libssl1.0.0              1.0.1h-3
ii  libxml2                  2.9.1+dfsg1-3
ii  perl                     5.18.2-4
ii  zlib1g                   1:1.2.8.dfsg-1

Versions of packages apache2-bin suggests:
pn  apache2-doc                                      <none>
pn  apache2-suexec-pristine | apache2-suexec-custom  <none>
pn  www-browser                                      <none>

Versions of packages apache2 is related to:
ii  apache2      2.4.9-2
ii  apache2-bin  2.4.9-2

-- Configuration Files:
/etc/apache2/apache2.conf changed:
Mutex file:${APACHE_LOCK_DIR} default
PidFile ${APACHE_PID_FILE}
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 5
User ${APACHE_RUN_USER}
Group ${APACHE_RUN_GROUP}
HostnameLookups Off
ErrorLog ${APACHE_LOG_DIR}/error.log
LogLevel warn
CoreDumpDirectory /var/cache/apache2
IncludeOptional mods-enabled/*.load
IncludeOptional mods-enabled/*.conf
Include ports.conf
<Directory />
	Options FollowSymLinks
	AllowOverride None
	Require all denied
</Directory>
<Directory /usr/share>
	AllowOverride None
	Require all granted
</Directory>
<Directory /var/www/>
	Options Indexes FollowSymLinks
	AllowOverride None
	Require all granted
</Directory>
AccessFileName .htaccess
<FilesMatch "^\.ht">
	Require all denied
</FilesMatch>
LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %O" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
IncludeOptional conf-enabled/*.conf
IncludeOptional sites-enabled/*.conf

/etc/apache2/mods-available/ssl.conf changed:
<IfModule mod_ssl.c>
	# Pseudo Random Number Generator (PRNG):
	# Configure one or more sources to seed the PRNG of the SSL library.
	# The seed data should be of good random quality.
	# WARNING! On some platforms /dev/random blocks if not enough entropy
	# is available. This means you then cannot use the /dev/random device
	# because it would lead to very long connection times (as long as
	# it requires to make more entropy available). But usually those
	# platforms additionally provide a /dev/urandom device which doesn't
	# block. So, if available, use this one instead. Read the mod_ssl User
	# Manual for more details.
	#
	SSLRandomSeed startup builtin
	SSLRandomSeed startup file:/dev/urandom 512
	SSLRandomSeed connect builtin
	SSLRandomSeed connect file:/dev/urandom 512
	##
	##  SSL Global Context
	##
	##  All SSL configuration in this context applies both to
	##  the main server and all SSL-enabled virtual hosts.
	##
	#
	#   Some MIME-types for downloading Certificates and CRLs
	#
	AddType application/x-x509-ca-cert .crt
	AddType application/x-pkcs7-crl	.crl
	#   Pass Phrase Dialog:
	#   Configure the pass phrase gathering process.
	#   The filtering dialog program (`builtin' is a internal
	#   terminal dialog) has to provide the pass phrase on stdout.
        SSLPassPhraseDialog exec:/usr/local/sbin/ssl-passphrase.sh
	#   Inter-Process Session Cache:
	#   Configure the SSL Session Cache: First the mechanism 
	#   to use and second the expiring timeout (in seconds).
	#   (The mechanism dbm has known memory leaks and should not be used).
	#SSLSessionCache		 dbm:${APACHE_RUN_DIR}/ssl_scache
	SSLSessionCache		shmcb:${APACHE_RUN_DIR}/ssl_scache(512000)
	SSLSessionCacheTimeout  300
	#   Semaphore:
	#   Configure the path to the mutual exclusion semaphore the
	#   SSL engine uses internally for inter-process synchronization. 
	#   (Disabled by default, the global Mutex directive consolidates by default
	#   this)
	#Mutex file:${APACHE_LOCK_DIR}/ssl_mutex ssl-cache
	#   SSL Cipher Suite:
	#   List the ciphers that the client is permitted to negotiate. See the
	#   ciphers(1) man page from the openssl package for list of all available
	#   options.
	#   Enable only secure ciphers:
	SSLCipherSuite HIGH:!aNULL
	#   The protocols to enable.
	#   Available values: all, SSLv3, TLSv1, TLSv1.1, TLSv1.2
	#   SSL v2  is no longer supported
	SSLProtocol all
	#   Allow insecure renegotiation with clients which do not yet support the
	#   secure renegotiation protocol. Default: Off
	#SSLInsecureRenegotiation on
	#   Whether to forbid non-SNI clients to access name based virtual hosts.
	#   Default: Off
	#SSLStrictSNIVHostCheck On
</IfModule>


-- debconf information:
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
	LANGUAGE = (unset),
	LC_ALL = (unset),
	LANG = "de_DE.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_MESSAGES to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory

Message #10 received at 753851@bugs.debian.org (full text, mbox, reply):

From: Rainer Dorsch <ml@bokomoko.de>

To: 753851@bugs.debian.org

Subject: Backtrace obtained

Date: Sun, 06 Jul 2014 15:19:25 +0200

Hello,

I obtained now a backtrace. 

I had to include the ulimit into the apache2 init.d script:

root@home:/etc/init.d# diff apache2.orig apache2
172a173
>               ulimit -c unlimited
root@home:/etc/init.d# 


It seems to be a php5 issue:

root@home:/var/cache/apache2# gdb /usr/sbin/apache2 /var/cache/apache2/core
GNU gdb (GDB) 7.6.2 (Debian 7.6.2-1.1+b1)
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "arm-linux-gnueabihf".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/sbin/apache2...Reading symbols from 
/usr/lib/debug/usr/sbin/apache2...done.
done.
[New LWP 3856]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Core was generated by `/usr/sbin/apache2 -k start'.
Program terminated with signal 11, Segmentation fault.
#0  0xb67117c8 in gc_remove_zval_from_buffer () from 
/usr/lib/apache2/modules/libphp5.so
(gdb) bt full
#0  0xb67117c8 in gc_remove_zval_from_buffer () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#1  0xb66f3968 in _zval_ptr_dtor () from /usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#2  0xb67067a0 in zend_hash_destroy () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#3  0xb6715b46 in zend_object_std_dtor () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#4  0xb6715b9c in zend_objects_free_object_storage () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#5  0xb6719ad0 in zend_objects_store_del_ref_by_handle_ex () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#6  0xb6719afa in zend_objects_store_del_ref () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#7  0xb66f3958 in _zval_ptr_dtor () from /usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#8  0xb67067a0 in zend_hash_destroy () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#9  0xb6715b46 in zend_object_std_dtor () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#10 0xb6715b9c in zend_objects_free_object_storage () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#11 0xb6719ad0 in zend_objects_store_del_ref_by_handle_ex () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#12 0xb6719afa in zend_objects_store_del_ref () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#13 0xb66f3958 in _zval_ptr_dtor () from /usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#14 0xb67067a0 in zend_hash_destroy () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#15 0xb6715b46 in zend_object_std_dtor () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#16 0xb6715b9c in zend_objects_free_object_storage () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#17 0xb6719ad0 in zend_objects_store_del_ref_by_handle_ex () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#18 0xb6719afa in zend_objects_store_del_ref () from 
/usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#19 0xb66f3958 in _zval_ptr_dtor () from /usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#20 0xb6712082 in ?? () from /usr/lib/apache2/modules/libphp5.so
No symbol table info available.
#21 0xb6712082 in ?? () from /usr/lib/apache2/modules/libphp5.so
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
(gdb) 

The problem showed up with (5.6.0~rc1+dfsg-1), upgraded now to 
5.6.0~rc2+dfsg-1 from sid and check if the problem will be reproduced there as 
well.

Thanks,
Rainer

-- 
Rainer Dorsch
http://bokomoko.de/

Message #15 received at 753851@bugs.debian.org (full text, mbox, reply):

From: Arno Töll <arno@debian.org>

To: Rainer Dorsch <ml@bokomoko.de>, 753851@bugs.debian.org, control@bugs.debian.org

Subject: Re: Bug#753851: apache2: [core:notice] [pid 22446] AH00052: child pid 22554 exit signal Segmentation fault (11)

Date: Sun, 06 Jul 2014 15:26:02 +0200

[Message part 1 (text/plain, inline)]

reassign 753851 libapache2-mod-php5
thanks


Hi Rainer,


yes - this is indeed an issue in PHP. gc_remove_zval_from_buffer sounds
like PHP tries to access a freed value. I'm reassigning to PHP, maybe
they can tell you more about.

-- 
with kind regards,
Arno Töll
IRC: daemonkeeper on Freenode/OFTC
GnuPG Key-ID: 0x9D80F36D

[signature.asc (application/pgp-signature, attachment)]

Message #24 received at 753851@bugs.debian.org (full text, mbox, reply):

From: Rainer Dorsch <ml@bokomoko.de>

To: 753851@bugs.debian.org

Subject: Re: Bug#753851: apache2: [core:notice] [pid 22446] AH00052: child pid 22554 exit signal Segmentation fault (11)

Date: Sun, 06 Jul 2014 20:17:45 +0200

Since the upgrade to 5.6.0~rc2+dfsg-1 I have not seen the problem anymore.

I suggest to close the bug-report. If it reappears, I will reopen it.

Thanks,
Rainer

-- 
Rainer Dorsch
http://bokomoko.de/

Message #29 received at 753851-done@bugs.debian.org (full text, mbox, reply):

From: Lior Kaplan <kaplan@debian.org>

To: 753851-done@bugs.debian.org

Subject: Re: [php-maint] Bug#753851: apache2: [core:notice] [pid 22446] AH00052: child pid 22554 exit signal Segmentation fault (11)

Date: Sun, 6 Jul 2014 21:25:37 +0300

[Message part 1 (text/plain, inline)]

Version: 5.6.0~rc2+dfsg-1

Closing, as suggested by the reporter.

Kaplan

[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.