[php-maint] Bug#620423: Looking for update

Shane Chambers shane at bigblueswing.com
Mon Aug 15 19:47:31 UTC 2011


I'm hoping for any update on this bug.  From the stack trace I took last 
week, we're running into the same problem on multiple servers, crashing 
the site multiple times a day during moderately busy periods.

The workaround listed from Kian Mohageri of using "zend.enable_gc=0" 
changes the problem from Apache crashing with a Segmentation Fault, to 
Apache hanging (with load level of 150/4 and higher), and refusing to 
respond to any more requests.  4GB of memory is completely consumed by 
Apache at this time.  Nothing else is running on this system.

I'm running into this on two different systems, with two different 
kernels.  2.6.32-5-686-bigmem, and 2.6.32-5-amd64.  I don't have a stack 
trace handy for the amd64 kernel, but here's the 686 kernel stack trace 
from prior to the workaround listed above;

Hardware: ESXi 3.5
Linux web1 2.6.32-5-686-bigmem #1 SMP Mon Jun 13 05:03:09 UTC 2011 i686 
GNU/Linux
root at web1: cat /etc/issue
Debian GNU/Linux 6.0 \n \l

+++-========================-========================-================================================================
ii  php5                     5.3.3-7+squeeze3         server-side, 
HTML-embedded scripting language (metapackage)
ii  php5-adodb               5.04-6                   Extension 
optimising the ADOdb database abstraction library
ii  php5-auth-pam            0.4-10+b1                A PHP5 extension 
for PAM authentication
ii  php5-cgi                 5.3.3-7+squeeze3         server-side, 
HTML-embedded scripting language (CGI binary)
ii  php5-cli                 5.3.3-7+squeeze3         command-line 
interpreter for the php5 scripting language
ii  php5-common              5.3.3-7+squeeze3         Common files for 
packages built from the php5 source
ii  php5-curl                5.3.3-7+squeeze3         CURL module for php5
ii  php5-dbg                 5.3.3-7+squeeze3         Debug symbols for PHP5
ii  php5-dev                 5.3.3-7+squeeze3         Files for PHP5 
module development
un  php5-enchant <none>                   (no description available)
ii  php5-ffmpeg              0.6.0-2                  audio and video 
support via ffmpeg for php5
ii  php5-gd                  5.3.3-7+squeeze3         GD module for php5
ii  php5-geoip               1.0.7-2                  GeoIP module for php5
ii  php5-gmp                 5.3.3-7+squeeze3         GMP module for php5
ii  php5-idn                 1.2b-6                   PHP API for the 
IDNA library
ii  php5-imagick             3.0.0~rc1-1              ImageMagick module 
for php5
ii  php5-imap                5.3.3-7+squeeze3         IMAP module for php5
ii  php5-interbase           5.3.3-7+squeeze3         interbase/firebird 
module for php5
un  php5-intl <none>                   (no description available)
un  php5-json <none>                   (no description available)
ii  php5-lasso               2.2.1-4+b1               Library for 
Liberty Alliance and SAML protocols - PHP 5 bindings
ii  php5-ldap                5.3.3-7+squeeze3         LDAP module for php5
ii  php5-mapscript           5.6.5-2+squeeze2         php5-cgi module 
for MapServer
ii  php5-mcrypt              5.3.3-7+squeeze3         MCrypt module for php5
ii  php5-memcache            3.0.4-4                  memcache extension 
module for PHP5
un  php5-mhash <none>                   (no description available)
ii  php5-ming                1:0.4.3-1+b1             Ming module for php5
ii  php5-mysql               5.3.3-7+squeeze3         MySQL module for php5
un  php5-mysqli <none>                   (no description available)
ii  php5-odbc                5.3.3-7+squeeze3         ODBC module for php5
rc  php5-pgsql               5.3.3-7+squeeze3         PostgreSQL module 
for php5  (THIS WAS REMOVED AFTER THE STACK TRACE)
ii  php5-ps                  1.3.6-3+b1               ps module for PHP 5
ii  php5-pspell              5.3.3-7+squeeze3         pspell module for php5
ii  php5-recode              5.3.3-7+squeeze3         recode module for php5
ii  php5-sasl                0.1.0-1+b1               Cyrus SASL 
extension for PHP 5
ii  php5-snmp                5.3.3-7+squeeze3         SNMP module for php5
un  php5-sqlite <none>                   (no description available)
ii  php5-suhosin             0.9.32.1-1               advanced 
protection module for php5
un  php5-sybase <none>                   (no description available)
ii  php5-tidy                5.3.3-7+squeeze3         tidy module for php5
ii  php5-xcache              1.3.0-7                  Fast, stable PHP 
opcode cacher
ii  php5-xmlrpc              5.3.3-7+squeeze3         XML-RPC module for 
php5
ii  php5-xsl                 5.3.3-7+squeeze3         XSL module for php5



Core was generated by `/usr/sbin/apache2 -k start'.
Program terminated with signal 11, Segmentation fault.
#0  0xb6e44cb5 in _zend_hash_add_or_update (ht=0xb8581dfc, 
arKey=0xb8a37c28 "REMOTE_ADDR", nKeyLength=<unknown type>,
     pData=0xbfb04e68, nDataSize=<unknown type>, pDest=0xbfb04e64, flag=1)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:413
413    
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c: 
No such file or directory.
     in 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c
(gdb) bt full
#0  0xb6e44cb5 in _zend_hash_add_or_update (ht=0xb8581dfc, 
arKey=0xb8a37c28 "REMOTE_ADDR", nKeyLength=<unknown type>,
     pData=0xbfb04e68, nDataSize=<unknown type>, pDest=0xbfb04e64, flag=1)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:413
         h = <unknown type>
         p = 0xb8581dfc
#1  0xb6debeec in php_register_variable_ex (var_name=0xb8c6dfdc 
"REMOTE_ADDR", val=0xbfb04eec,
     track_vars_array=0xb8581d94) at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.h:348
         p = 0x498d0a4b <Address 0x498d0a4b out of bounds>
         ip = 0x0
         index = 0xb8a37c28 "REMOTE_ADDR"
         escaped_index = 0xb8a37c28 "REMOTE_ADDR"
         var = 0xb8a37c28 "REMOTE_ADDR"
         var_orig = 0xb8a37c28 "REMOTE_ADDR"
         var_len = 11
         index_len = 11
         gpc_element = 0xb8c7746c
         gpc_element_p = 0xb8c1fe88
         is_array = 20 '\024'
         symtable1 = 0xb8581dfc
         var_name = 0xb8583914 "\217\211ACS\201IC"
#2  0xb6c352ed in php_sapi_filter (arg=4, var=0xb17bd487 "REMOTE_ADDR", 
val=0xbfb04f9c, val_len=<unknown type>,
     new_val_len=0x0) at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/ext/filter/filter.c:484
         new_var = {value = {lval = -1194918048, dval = 
2.6995577325436058e-313, str = {
               val = 0xb8c6ff60 "65.52.56.128", len = 12}, ht = 
0xb8c6ff60, obj = {handle = <unknown type>,
               handlers = 0xc}}, refcount__gc = <unknown type>, type = 6 
'\006', is_ref__gc = 79 'O'}
         raw_var = {value = {lval = -1195239844, dval = 
2.6995418337087489e-313, str = {
               val = 0xb8c2165c "65.52.56.128", len = 12}, ht = 
0xb8c2165c, obj = {handle = <unknown type>,
               handlers = 0xc}}, refcount__gc = <unknown type>, type = 6 
'\006', is_ref__gc = 0 '\000'}
         array_ptr = 0xb8c772f0
         orig_array_ptr = 0xb8581d94
         orig_var = 0xb8c6dfdc "REMOTE_ADDR"
         retval = 0
         arg = -1202177772
         var = 0xb8581d94 "\374\035X\270"
         val = 0xbfb04f9c
#3  0xb17af053 in suhosin_input_filter_wrapper () from 
/usr/lib/php5/20090626+lfs/suhosin.so
No symbol table info available.
#4  0xb6de56c4 in sapi_getenv (name=0xb17bd487 "REMOTE_ADDR", 
name_len=<unknown type>)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/main/SAPI.c:944
         name = 0x0
         name_len = <unknown type>
         value = 0xb8c1fe88 "65.52.56.128"
         tmp = 0xb8583914 "\217\211ACS\201IC"
         value = 0xb8c1fe88 "65.52.56.128"
#5  0xb17b25e1 in suhosin_log () from /usr/lib/php5/20090626+lfs/suhosin.so
No symbol table info available.
#6  0xb6e57d10 in _zend_mm_free_canary_int (heap=0xb8122620, p=0xb06f4f24)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_alloc_canary.c:2090
         p = 0x498d0a4b <Address 0x498d0a4b out of bounds>
         mm_block = 0x41050043
         next_block = 0xb06f4f24
         size = <unknown type>
         heap = 0xb8122620
         p = 0xb06f4f24
#7  0xb6e17628 in _efree (ptr=0xb06f4f24)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_alloc.c:2616
         ptr = 0xb06f4f24
#8  0xb6e2dbcb in destroy_op_array (op_array=0xb89a5e68)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_opcode.c:239
         opline = 0xb06f4f24
         end = 0xb8583914
         i = <unknown type>
         op_array = 0xb89a5e68
#9  0xb6e2dd82 in destroy_zend_function (function=0xb89a5e68)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_opcode.c:115
         function = 0xb8583914
#10 0xb6e2ddad in zend_function_dtor (function=0xb89a5e68)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_opcode.c:127
         function = 0xb8583914
#11 0xb6e43104 in zend_hash_destroy (ht=0xb8a17860)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:726
         p = 0xb88aaadc
         ht = 0xb8a17860
#12 0xb6e2de41 in destroy_zend_class (pce=0xb877464c)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_opcode.c:191
         ce = 0xb8a17844
         pce = 0xb8583914
#13 0xb6e42d7a in zend_hash_apply_deleter (ht=0xb8a17844, p=0xb8774640)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:813
         retval = 0xb8583914
#14 0xb6e42e9c in zend_hash_reverse_apply (ht=0xb8197b80, 
apply_func=0xb6e287b0 <clean_non_persistent_class>)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:962
         result = -1197377468
         p = 0x498d0a4b
#15 0xb6e296e8 in shutdown_executor ()
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_execute_API.c:310
         __orig_bailout = <incomplete type>
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __orig_bailout = <incomplete type>
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
         __bailout = {{__jmpbuf = {-1222014660, -1221887840, 
-1226614240, -1078946712, 487207632, -1190805310},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
#16 0xb6e366cf in zend_deactivate () at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend.c:962
         __orig_bailout = 0x0
         __bailout = {{__jmpbuf = {-1222014660, -1221888960, 
-1221888744, -1078946504, 486929104, -1159695678},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
         __orig_bailout = 0x0
         __bailout = {{__jmpbuf = {-1222014660, -1221888960, 
-1221888744, -1078946504, 486929104, -1159695678},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
         __orig_bailout = 0xbfb094a8
         __bailout = {{__jmpbuf = {-1222014660, -1221888960, 
-1221888744, -1078946504, 486929104, -1159695678},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
         __orig_bailout = 0x439ead1b
         __bailout = {{__jmpbuf = {-1222014660, -1221888960, 
-1221888744, -1078946504, 486929104, -1159695678},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
         __orig_bailout = 0xbfb094a8
         __bailout = {{__jmpbuf = {-1222014660, -1221888960, 
-1221888744, -1078946504, 486929104, -1159695678},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
         __orig_bailout = 0x0
         __bailout = {{__jmpbuf = {-1222014660, -1221888960, 
-1221888744, -1078946504, 486929104, -1159695678},
             __mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
#17 0xb6ddae98 in php_request_shutdown (dummy=0x0)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/main/main.c:1649
         report_memleaks = 1 '\001'
#18 0xb6ec864c in php_handler (r=0xb8756288)
     at 
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/sapi/apache2handler/sapi_apache2.c:526
         ctx = 0xb8757708
         conf = 0xb85c61b8
         brigade = 0xb8757bc0
         bucket = 0xb8583914
         rv = -1202177772
         parent_req = 0x0
#19 0xb778a541 in ap_run_handler (r=0xb8756288) at 
/tmp/buildd/apache2-2.2.16/server/config.c:159
         n = 4
         rv = <value optimized out>
#20 0xb778e346 in ap_invoke_handler (r=0xb8756288) at 
/tmp/buildd/apache2-2.2.16/server/config.c:377
         handler = 0xb80a7590 "application/x-httpd-php"
         result = <value optimized out>
         old_handler = 0xb80a7590 "application/x-httpd-php"
         ignore = <value optimized out>
#21 0xb779db14 in ap_internal_redirect (new_uri=0xb8756278 "/index.php", 
r=0xb84f2260)
     at /tmp/buildd/apache2-2.2.16/modules/http/http_request.c:502
         new = 0xb8756288
         access_status = -1202177772
#22 0xb653c7fd in handler_redirect (r=0xb84f2260) at 
/tmp/buildd/apache2-2.2.16/modules/mappers/mod_rewrite.c:4848
No locals.
#23 0xb778a541 in ap_run_handler (r=0xb84f2260) at 
/tmp/buildd/apache2-2.2.16/server/config.c:159
         n = 5
         rv = <value optimized out>
#24 0xb778e346 in ap_invoke_handler (r=0xb84f2260) at 
/tmp/buildd/apache2-2.2.16/server/config.c:377
         handler = 0xb6541237 "redirect-handler"
         result = <value optimized out>
         old_handler = 0xb6541237 "redirect-handler"
         ignore = <value optimized out>
#25 0xb779dcc8 in ap_process_request (r=0xb84f2260) at 
/tmp/buildd/apache2-2.2.16/modules/http/http_request.c:282
         access_status = -1202177772
#26 0xb779a7e8 in ap_process_http_connection (c=0xb85b5930) at 
/tmp/buildd/apache2-2.2.16/modules/http/http_core.c:190
         r = 0xb84f2260
         csd = 0x0
#27 0xb7792dc1 in ap_run_process_connection (c=0xb85b5930) at 
/tmp/buildd/apache2-2.2.16/server/connection.c:43
         n = 3
         rv = <value optimized out>
#28 0xb77a318a in child_main (child_num_arg=<value optimized out>)
     at /tmp/buildd/apache2-2.2.16/server/mpm/prefork/prefork.c:662
         current_conn = <value optimized out>
         csd = 0xb85b5798
         ptrans = 0xb85b5758
         allocator = 0xb85b36c8
         status = <value optimized out>
         i = <value optimized out>
         lr = <value optimized out>
         pollset = 0xb85b37f8
         sbh = 0xb85b37f0
         bucket_alloc = 0xb85b99a8
         last_poll_idx = 1
#29 0xb77a350e in make_child (s=<value optimized out>, slot=162)
     at /tmp/buildd/apache2-2.2.16/server/mpm/prefork/prefork.c:758
No locals.
#30 0xb77a44bb in perform_idle_server_maintenance (_pconf=0xb7e980a8, 
plog=0xb7eca170, s=0xb7e9c8e8)
     at /tmp/buildd/apache2-2.2.16/server/mpm/prefork/prefork.c:893
         i = 25
         idle_count = -1216666736
         free_length = <value optimized out>
         free_slots = {93, 94, 97, 99, 103, 105, 112, 113, 114, 116, 
121, 122, 123, 130, 137, 139, 142, 144, 153, 154,
           155, 158, 160, 161, 162, 163, 164, 167, 168, 170, 174, 175}
         last_non_dead = <value optimized out>
         total_non_dead = 158
#31 ap_mpm_run (_pconf=0xb7e980a8, plog=0xb7eca170, s=0xb7e9c8e8)
     at /tmp/buildd/apache2-2.2.16/server/mpm/prefork/prefork.c:1097
         status = 0
         pid = {pid = -1, in = 0xb76c0466, out = 0xb7e92008, err = 0x0}
         child_slot = <value optimized out>
         exitwhy = APR_PROC_EXIT
         processed_status = 32
         index = <value optimized out>
         remaining_children_to_start = <value optimized out>
         rv = <value optimized out>
#32 0xb7774fa2 in main (argc=3, argv=0xbfb09d84) at 
/tmp/buildd/apache2-2.2.16/server/main.c:742
         c = 0 '\000'
         configtestonly = -1216718076
         confname = 0xb77a636f "apache2.conf"
         def_server_root = 0xb77a6362 "/etc/apache2"
         temp_error_log = 0xb77a654c "Pre-configuration failed"
         error = <value optimized out>
         process = 0xb7e96130
         server_conf = <value optimized out>
         pglobal = 0xb77a6580
         pconf = 0xb7e980a8
         plog = 0xb7eca170
         ptemp = 0xb7ed1188
         pcommands = 0xb7e9a0b0
         opt = 0xb7e9a150
         rv = <value optimized out>
         mod = <value optimized out>
         optarg = 0xb77a59fa "\201\303", <incomplete sequence \372\245>


Thank you for your time.  Any help is appreciated.

Shane Chambers





More information about the pkg-php-maint mailing list