PHP random segfaults on session_start();

I'm confirming this issue.

I confirm this behavior as well. A php script with nothing more than session_start() will randomly segfault. I haven't been able to produce any similar issues with php-cli.

This bug appears to be upstream, it has also been reported in Gentoo;

http://bugs.gentoo.org/show_bug.cgi?id=276583

Switching off session encryption in suhosin bypasses the issue for now. Workaround is to edit;

/etc/php5/apache2/conf.d/suhosin.ini

and add;

suhosin.session.encrypt = off

then restart Apache.

Also reported on Debian;

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542514

Hi,

I also have this bug and noticed using ispCP (http://www.isp-control.net) with fcgid module of apache.
I've edited this file: /etc/php5/conf.d/suhosin.ini instead of the one mentioned above and now works.

Hi I was able to reproduce this with the following setup:

apache2-mpm-worker 2.2.12-1ubuntu2
libapache2-mod-fcgid 1:2.2-1
php5-cgi 5.2.10.dfsg.1-2ubuntu3
php5-suhosin 0.9.28-1

The cause is definitely the php5-suhoshin module which is fixed in 0.9.28. I will ask for a FFE exception and a sync request.

Regards
chuck

Hi I would like to ask for a FFE exception for php-suhosin. The debian changelog is the following:

 php-suhosin (0.9.28-1) unstable; urgency=low

   * New upstream version
     - Fixed crash bug with PHP 5.2.10 caused by a
       change in extension load order of ext/session
       (Closes: #538820)

 -- Alexander Wirt <email address hidden> Fri, 14 Aug 2009 08:09:56 +0200

Hi Chuck,

When I first heard about suhosin causing the problem, my first attempt to work-around the problem was to uninstall the php-suhosin package. But this made no difference to the results/segfaults I was seeing.

Got me confused, but anything that fixes this is good news.

No FFe needed for bugfixes. Unsubscribing motu-release.

With the provided workaround, I still get the segfaults sometimes.

Niels,

Did you try editing;

/etc/php5/apache2/conf.d/suhosin.ini

as I suggested and

/etc/php5/conf.d/suhosin.ini

as Gustavo suggested?

You might need to modify both, since I've noticed that i've also got encryption as off in both files. I probably changed the php5/conf.d version in previous attempts to work-around this.

Change both files to have encryption off and you should be ok.

I could be wrong here, but I think the file Gustavo mentioned is related to the php5-suhosin package. But I believe the PHP5 modules being shipped also include a suhosin patch which is were the php5/conf.d version of the suhosin.ini comes in.

Confusing situation if we have two versions of suhosin on the go :(
One patched into PHP5 as well as a separate installed package.

Hi,

Please sync php-suhosin from debian unstable. The changelog entry is the following:
 php-suhosin (0.9.28-1) unstable; urgency=low

   * New upstream version
     - Fixed crash bug with PHP 5.2.10 caused by a
       change in extension load order of ext/session
       (Closes: #538820)

 -- Alexander Wirt <email address hidden> Fri, 14 Aug 2009 08:09:56 +0200

Mmm could be. I think the other related to apache is when you use its module
cause on my installation (that I use fcgid and not libapache2-mod-php5) only
was in /etc/php5/conf.d/suhosin.ini. For now is working good :)

2009/9/11 Chris <email address hidden>

> Niels,
>
> Did you try editing;
>
> /etc/php5/apache2/conf.d/suhosin.ini
>
> as I suggested and
>
> /etc/php5/conf.d/suhosin.ini
>
> as Gustavo suggested?
>
> You might need to modify both, since I've noticed that i've also got
> encryption as off in both files. I probably changed the php5/conf.d
> version in previous attempts to work-around this.
>
> Change both files to have encryption off and you should be ok.
>
> I could be wrong here, but I think the file Gustavo mentioned is related
> to the php5-suhosin package. But I believe the PHP5 modules being
> shipped also include a suhosin patch which is were the php5/conf.d
> version of the suhosin.ini comes in.
>
> Confusing situation if we have two versions of suhosin on the go :(
> One patched into PHP5 as well as a separate installed package.
>
> --
> PHP random segfaults on session_start();
> https://bugs.launchpad.net/bugs/424789
> You received this bug notification because you are a direct subscriber
> of the bug.
>

This should be fixed now.

Regards
chuck

This should be fixed now in Karmic. Thanks for the bug report.

Regards
chuck

Many thanks.

I accepted the config files during the upgrades so all settings at default and working as expected.

:D

Works fine for me too, thanks!

2009/9/18 Chris <email address hidden>

> Many thanks.
>
> I accepted the config files during the upgrades so all settings at
> default and working as expected.
>
> :D
>

--
Gustavo A. Díaz
GDNet Projects
www.gdnet.com.ar