Debian Bug report logs - #865670
Corrupted tzdata file can crash PHP

Package: php7.0-fpm
Version: 7.0.20-2
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
Is updated apt update && apt upgrade to the latest PHP and all my programs stopped.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
 just updated PHP. 

   * What was the outcome of this action?
root@server:~# cat /tmp/74806.php
<?php
$a = new DateTime('now', new DateTimeZone('Europe/Budapest'));
var_dump($a);

root@server:~# php /tmp/74806.php

mmap() failed: [12] Cannot allocate memory

mmap() failed: [12] Cannot allocate memory
PHP Fatal error:  Out of memory (allocated 2097152) (tried to allocate 19301007360 bytes) in /tmp/74806.php on line 2

   * What outcome did you expect instead?
root@server:~# cat /tmp/74807.php
<?php
$a = new DateTime('now', new DateTimeZone('Europe/Paris'));
var_dump($a);

root@server:~# php /tmp/74807.php
object(DateTime)#1 (3) {
  ["date"]=>
  string(26) "2017-06-23 17:51:39.000000"
  ["timezone_type"]=>
  int(3)
  ["timezone"]=>
  string(12) "Europe/Paris"
}

*** End of the template - remove these template lines ***

-- Package-specific info:
==== Additional PHP 7.0 information ====

++++ PHP 7.0 SAPI (php7.0query -S): ++++

++++ PHP 7.0 Extensions (php7.0query -M -v): ++++

++++ Configuration files: ++++
[PHP]
engine = On
short_open_tag = Off
precision = 14
output_buffering = 4096
zlib.output_compression = Off
implicit_flush = Off
unserialize_callback_func =
serialize_precision = 17
disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
disable_classes =
zend.enable_gc = On
expose_php = Off
max_execution_time = 30
max_input_time = 60
memory_limit = 128M
error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT
display_errors = On
display_startup_errors = On
log_errors = On
log_errors_max_len = 1024
ignore_repeated_errors = Off
ignore_repeated_source = Off
report_memleaks = On
track_errors = Off
html_errors = On
variables_order = "GPCS"
request_order = "GP"
register_argc_argv = Off
auto_globals_jit = On
post_max_size = 8M
auto_prepend_file =
auto_append_file =
default_mimetype = "text/html"
default_charset = "UTF-8"
doc_root =
user_dir =
enable_dl = Off
file_uploads = On
upload_max_filesize = 2M
max_file_uploads = 20
allow_url_fopen = On
allow_url_include = Off
default_socket_timeout = 60
[CLI Server]
cli_server.color = On
[Date]
date.timezone = Europe/Paris
[filter]
[iconv]
[intl]
[sqlite3]
[Pcre]
[Pdo]
[Pdo_mysql]
pdo_mysql.cache_size = 2000
pdo_mysql.default_socket=
[Phar]
[mail function]
SMTP = localhost
smtp_port = 25
mail.add_x_header = On
[SQL]
sql.safe_mode = Off
[ODBC]
odbc.allow_persistent = On
odbc.check_persistent = On
odbc.max_persistent = -1
odbc.max_links = -1
odbc.defaultlrl = 4096
odbc.defaultbinmode = 1
[Interbase]
ibase.allow_persistent = 1
ibase.max_persistent = -1
ibase.max_links = -1
ibase.timestampformat = "%Y-%m-%d %H:%M:%S"
ibase.dateformat = "%Y-%m-%d"
ibase.timeformat = "%H:%M:%S"
[MySQLi]
mysqli.max_persistent = -1
mysqli.allow_persistent = On
mysqli.max_links = -1
mysqli.cache_size = 2000
mysqli.default_port = 3306
mysqli.default_socket =
mysqli.default_host =
mysqli.default_user =
mysqli.default_pw =
mysqli.reconnect = Off
[mysqlnd]
mysqlnd.collect_statistics = On
mysqlnd.collect_memory_statistics = Off
[OCI8]
[PostgreSQL]
pgsql.allow_persistent = On
pgsql.auto_reset_persistent = Off
pgsql.max_persistent = -1
pgsql.max_links = -1
pgsql.ignore_notice = 0
pgsql.log_notice = 0
[bcmath]
bcmath.scale = 0
[browscap]
[Session]
session.save_handler = files
session.use_strict_mode = 0
session.use_cookies = 1
session.use_only_cookies = 1
session.name = PHPSESSID
session.auto_start = 0
session.cookie_lifetime = 0
session.cookie_path = /
session.cookie_domain =
session.cookie_httponly =
session.serialize_handler = php
session.gc_probability = 0
session.gc_divisor = 1000
session.gc_maxlifetime = 1440
session.referer_check =
session.cache_limiter = nocache
session.cache_expire = 180
session.use_trans_sid = 0
session.hash_function = 0
session.hash_bits_per_character = 5
url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"
[Assertion]
zend.assertions = -1
[COM]
[mbstring]
[gd]
[exif]
[Tidy]
tidy.clean_output = Off
[soap]
soap.wsdl_cache_enabled=1
soap.wsdl_cache_dir="/tmp"
soap.wsdl_cache_ttl=86400
soap.wsdl_cache_limit = 5
[sysvshm]
[ldap]
ldap.max_links = -1
[mcrypt]
[dba]
[opcache]
[curl]
[openssl]

**** /etc/php/7.0/fpm/conf.d/20-sysvmsg.ini ****
extension=sysvmsg.so

**** /etc/php/7.0/fpm/conf.d/20-json.ini ****
extension=json.so

**** /etc/php/7.0/fpm/conf.d/20-ftp.ini ****
extension=ftp.so

**** /etc/php/7.0/fpm/conf.d/20-calendar.ini ****
extension=calendar.so

**** /etc/php/7.0/fpm/conf.d/20-posix.ini ****
extension=posix.so

**** /etc/php/7.0/fpm/conf.d/20-xsl.ini ****
extension=xsl.so

**** /etc/php/7.0/fpm/conf.d/10-pdo.ini ****
extension=pdo.so

**** /etc/php/7.0/fpm/conf.d/20-xmlwriter.ini ****
extension=xmlwriter.so

**** /etc/php/7.0/fpm/conf.d/20-simplexml.ini ****
extension=simplexml.so

**** /etc/php/7.0/fpm/conf.d/20-sqlite3.ini ****
extension=sqlite3.so

**** /etc/php/7.0/fpm/conf.d/20-sysvshm.ini ****
extension=sysvshm.so

**** /etc/php/7.0/fpm/conf.d/20-igbinary.ini ****
extension=igbinary.so
igbinary.compact_strings=On

**** /etc/php/7.0/fpm/conf.d/20-curl.ini ****
extension=curl.so

**** /etc/php/7.0/fpm/conf.d/20-zip.ini ****
extension=zip.so

**** /etc/php/7.0/fpm/conf.d/20-shmop.ini ****
extension=shmop.so

**** /etc/php/7.0/fpm/conf.d/20-wddx.ini ****
extension=wddx.so

**** /etc/php/7.0/fpm/conf.d/20-gettext.ini ****
extension=gettext.so

**** /etc/php/7.0/fpm/conf.d/20-ldap.ini ****
extension=ldap.so

**** /etc/php/7.0/fpm/conf.d/20-ctype.ini ****
extension=ctype.so

**** /etc/php/7.0/fpm/conf.d/20-fileinfo.ini ****
extension=fileinfo.so

**** /etc/php/7.0/fpm/conf.d/20-imap.ini ****
extension=imap.so

**** /etc/php/7.0/fpm/conf.d/10-opcache.ini ****
zend_extension=opcache.so
opcache.enable=1
opcache.enable_cli=1
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=1

**** /etc/php/7.0/fpm/conf.d/10-mysqlnd.ini ****
extension=mysqlnd.so

**** /etc/php/7.0/fpm/conf.d/20-gd.ini ****
extension=gd.so

**** /etc/php/7.0/fpm/conf.d/20-exif.ini ****
extension=exif.so

**** /etc/php/7.0/fpm/conf.d/20-phar.ini ****
extension=phar.so

**** /etc/php/7.0/fpm/conf.d/20-redis.ini ****
extension=redis.so

**** /etc/php/7.0/fpm/conf.d/20-pdo_sqlite.ini ****
extension=pdo_sqlite.so

**** /etc/php/7.0/fpm/conf.d/20-sysvsem.ini ****
extension=sysvsem.so

**** /etc/php/7.0/fpm/conf.d/15-xml.ini ****
extension=xml.so

**** /etc/php/7.0/fpm/conf.d/20-mbstring.ini ****
extension=mbstring.so

**** /etc/php/7.0/fpm/conf.d/20-iconv.ini ****
extension=iconv.so

**** /etc/php/7.0/fpm/conf.d/20-xmlreader.ini ****
extension=xmlreader.so

**** /etc/php/7.0/fpm/conf.d/20-readline.ini ****
extension=readline.so

**** /etc/php/7.0/fpm/conf.d/20-tokenizer.ini ****
extension=tokenizer.so

**** /etc/php/7.0/fpm/conf.d/20-intl.ini ****
extension=intl.so

**** /etc/php/7.0/fpm/conf.d/20-dom.ini ****
extension=dom.so

**** /etc/php/7.0/fpm/conf.d/20-sockets.ini ****
extension=sockets.so

**** /etc/php/7.0/fpm/conf.d/20-pdo_mysql.ini ****
extension=pdo_mysql.so
pdo_mysql.default_socket=/var/run/mysqld/mysqld.sock

**** /etc/php/7.0/fpm/conf.d/20-mysqli.ini ****
extension=mysqli.so
mysqli.default_socket=/var/run/mysqld/mysqld.sock

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages php7.0-fpm depends on:
ii  init-system-helpers  1.48
ii  libapparmor1         2.11.0-3
ii  libc6                2.24-12
ii  libmagic1            1:5.30-1
ii  libpcre3             2:8.39-3
ii  libssl1.1            1.1.0f-3
ii  libsystemd0          232-25
ii  libxml2              2.9.4+dfsg1-2.2
ii  mime-support         3.60
ii  php7.0-cli           7.0.20-2
ii  php7.0-common        7.0.20-2
ii  php7.0-json          7.0.20-2
ii  php7.0-opcache       7.0.20-2
ii  procps               2:3.3.12-3
ii  tzdata               2017b-1
ii  ucf                  3.0036
ii  zlib1g               1:1.2.8.dfsg-5

php7.0-fpm recommends no packages.

Versions of packages php7.0-fpm suggests:
ii  php-pear  1:1.10.1+submodules+notgz-9

Versions of packages php7.0-common depends on:
ii  libc6       2.24-12
ii  libssl1.1   1.1.0f-3
ii  php-common  1:52
ii  ucf         3.0036

-- no debconf information

Debian Bug report logs - #865670 Corrupted tzdata file can crash PHP

Debian Bug report logs - #865670
Corrupted tzdata file can crash PHP