Debian Bug report logs - #786957
php-cgi: segfault after exec

version graph

Package: php5-cgi; Maintainer for php5-cgi is (unknown);

Reported by: "NetLeaders GmbH & Co. KG" <hostmaster@netleaders.de>

Date: Wed, 27 May 2015 07:36:01 UTC

Severity: important

Found in version php5/5.6.7+dfsg-1

Done: Ondřej Surý <ondrej@sury.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, unknown-package@qa.debian.org:
Bug#786957; Package php-cgi. (Wed, 27 May 2015 07:36:06 GMT) (full text, mbox, link).


Acknowledgement sent to "NetLeaders GmbH & Co. KG" <hostmaster@netleaders.de>:
New Bug report received and forwarded. Copy sent to unknown-package@qa.debian.org. (Wed, 27 May 2015 07:36:06 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "NetLeaders GmbH & Co. KG" <hostmaster@netleaders.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: php-cgi: segfault after exec
Date: Wed, 27 May 2015 09:13:21 +0200
Package: php-cgi
Version: php5-cgi
Severity: important

Dear Maintainer,

environment
Apache 2.4.10-10
libapache2-mod-fcgid 1:2.3.9-1+b1
php5-cgi 5.6.7+dfsg-1

---

By calling an php-file with exec statement I receive after 2nd to 3rd call errors like following line
[core:notice] [pid 22388] AH00052: child pid 22394 exit signal Segmentation fault (11)

After this it isn't able to successfully recall the file.

as an example
<?php
	echo exec('whoami');
?>

I tried this with several other commands, with the same result. 
I also tried to add exec to disabled_functions in php.ini and call the same file which results in segfault before, with disabled exec there isn't any problem (except there is no execution of course). 
And finaly I also tried to use popen instead of exec, with the same result (segfault).
So I'm pretty sure there is something strange with executions in general.


-- System Information:
Debian Release: 8.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Bug reassigned from package 'php-cgi' to 'php5-cgi'. Request was from Andreas Beckmann <anbe@debian.org> to control@bugs.debian.org. (Tue, 02 Jun 2015 08:45:30 GMT) (full text, mbox, link).


No longer marked as found in versions php5-cgi. Request was from Andreas Beckmann <anbe@debian.org> to control@bugs.debian.org. (Tue, 02 Jun 2015 08:45:30 GMT) (full text, mbox, link).


Marked as found in versions php5/5.6.7+dfsg-1. Request was from Andreas Beckmann <anbe@debian.org> to control@bugs.debian.org. (Tue, 02 Jun 2015 08:45:31 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#786957; Package php5-cgi. (Wed, 28 Oct 2015 12:27:09 GMT) (full text, mbox, link).


Acknowledgement sent to Ondřej Surý <ondrej@sury.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Wed, 28 Oct 2015 12:27:09 GMT) (full text, mbox, link).


Message #16 received at 786957@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: "NetLeaders GmbH & Co. KG" <hostmaster@netleaders.de>, 786957@bugs.debian.org
Subject: Re: Bug#786957: php-cgi: segfault after exec
Date: Wed, 28 Oct 2015 13:26:11 +0100
Dear NetLeaders,

unfortunately you have filled the bug against a wrong package (php-cgi
vs php5-cgi) and thus the bug script was not executed.

Could you run this command on affected system:

/usr/share/bug/php5-cli/script 3>&1

and attach the output to the #786957 bug?

Also upgrade to latest available version first before trying to
reproduce the bug again.

As a side note it's usually better to use php5-fpm these days instead of
running a pure php5-cgi in FastCGI mode.

Cheers,
-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server



Reply sent to Ondřej Surý <ondrej@sury.org>:
You have taken responsibility. (Wed, 27 Jan 2016 11:12:18 GMT) (full text, mbox, link).


Notification sent to "NetLeaders GmbH & Co. KG" <hostmaster@netleaders.de>:
Bug acknowledged by developer. (Wed, 27 Jan 2016 11:12:19 GMT) (full text, mbox, link).


Message #21 received at 786957-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: 786957-done@bugs.debian.org
Subject: Re: Bug#786957: php-cgi: segfault after exec
Date: Wed, 27 Jan 2016 12:10:43 +0100
Version: php5/5.6.7+dfsg-1

Requested information not provided after a long time, closing the bug.

-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server



Bug archived. Request was from Ondřej Surý <ondrej@debian.org> to control@bugs.debian.org. (Wed, 27 Jan 2016 11:45:06 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 00:45:25 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.