Re: apache is seg faulting. why ?
On Friday 30 January 2004 13:40, julien Beauviala wrote:
the following :
pid 72041 (httpd), uid 80: exited on signal 11
pid 72040 (httpd), uid 80: exited on signal 11
pid 72099 (httpd), uid 80: exited on signal 11
pid 72039 (httpd), uid 80: exited on signal 11
pid 74202 (httpd), uid 80: exited on signal 11
Make sure you're up-to-date - it may be a security hole.
Otherwise: use top(1) and check if at some point you see a httpd process
spinning wildly for a long time, while memory grows.
A frequent problem, is that somebody coded an infinite loop, filling a
variable and then the process runs outof memory and segfaults.
PHP code like this for example:
$i = 11;
$buffer = '';
while ( $i != 10 )
{
$buffer .= 'hello';
$i++;
}
--
Melvyn
===
FreeBSD sarevok.webteckies.org 5.2-CURRENT FreeBSD 5.2-CURRENT #0: Wed Jan 28
18:01:18 CET 2004
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/SAREVOK_NOAPM_NODEBUG
i386
===
pgp0.pgp
Description: signature
Re: apache is seg faulting. why ?
Melvyn Sopacua wrote:
On Friday 30 January 2004 13:40, julien Beauviala wrote:
the following :
pid 72041 (httpd), uid 80: exited on signal 11
pid 72040 (httpd), uid 80: exited on signal 11
pid 72099 (httpd), uid 80: exited on signal 11
pid 72039 (httpd), uid 80: exited on signal 11
pid 74202 (httpd), uid 80: exited on signal 11
Make sure you're up-to-date - it may be a security hole.
Otherwise: use top(1) and check if at some point you see a httpd process
spinning wildly for a long time, while memory grows.
A frequent problem, is that somebody coded an infinite loop, filling a
variable and then the process runs outof memory and segfaults.
PHP code like this for example:
$i = 11;
$buffer = '';
while ( $i != 10 )
{
$buffer .= 'hello';
$i++;
}
PHP does have memory-limits.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: apache is seg faulting. why ?
On Saturday 31 January 2004 17:36, Jon-Eirik Pettersen wrote:
Melvyn Sopacua wrote:
On Friday 30 January 2004 13:40, julien Beauviala wrote:
the following :
pid 72041 (httpd), uid 80: exited on signal 11
pid 72040 (httpd), uid 80: exited on signal 11
pid 72099 (httpd), uid 80: exited on signal 11
pid 72039 (httpd), uid 80: exited on signal 11
pid 74202 (httpd), uid 80: exited on signal 11
Make sure you're up-to-date - it may be a security hole.
Otherwise: use top(1) and check if at some point you see a httpd process
spinning wildly for a long time, while memory grows.
A frequent problem, is that somebody coded an infinite loop, filling a
variable and then the process runs outof memory and segfaults.
PHP code like this for example:
$i = 11;
$buffer = '';
while ( $i != 10 )
{
$buffer .= 'hello';
$i++;
}
PHP does have memory-limits.
Yes, but if the shell limit for uid 80 is less then php's memory limit, you
still have a segfault.
--
Melvyn
===
FreeBSD sarevok.webteckies.org 5.2-CURRENT FreeBSD 5.2-CURRENT #0: Wed Jan 28
18:01:18 CET 2004
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/SAREVOK_NOAPM_NODEBUG
i386
===
pgp0.pgp
Description: signature
Re: apache is seg faulting. why ?
- Original Message - From: julien Beauviala [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 30, 2004 1:41 PM Subject: apache is seg faulting. why ? Hello, since about four days, the daily security logs are reporting the following : pid 72041 (httpd), uid 80: exited on signal 11 pid 72040 (httpd), uid 80: exited on signal 11 pid 72099 (httpd), uid 80: exited on signal 11 pid 72039 (httpd), uid 80: exited on signal 11 pid 74202 (httpd), uid 80: exited on signal 11 I've been having those too (Apache 1.3.28 + PHP4). Turned out it was the PHP module; but I cannot run without it, and I have not been able to determine why this occurs. - Mark ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
apache is seg faulting. why ?
Hello, since about four days, the daily security logs are reporting the following : pid 72041 (httpd), uid 80: exited on signal 11 pid 72040 (httpd), uid 80: exited on signal 11 pid 72099 (httpd), uid 80: exited on signal 11 pid 72039 (httpd), uid 80: exited on signal 11 pid 74202 (httpd), uid 80: exited on signal 11 [etc... lots of lines] When I look at /var/log/messages I find : Jan 30 10:53:49 webserver /kernel: pid 20682 (httpd), uid 80: exited on signal 11 Jan 30 11:43:29 webserver /kernel: pid 24874 (httpd), uid 80: exited on signal 11 Jan 30 13:12:37 webserver /kernel: pid 32084 (httpd), uid 80: exited on signal 11 Jan 30 13:20:49 webserver /kernel: pid 32628 (httpd), uid 80: exited on signal 11 Jan 30 13:20:54 webserver /kernel: pid 32605 (httpd), uid 80: exited on signal 11 Jan 30 13:21:01 webserver /kernel: pid 32629 (httpd), uid 80: exited on signal 11 No idea what is going on, it started four days ago for no reason I can guess. In the apache logs I find no actions that would be in sync with those timestamps. Google was not much help either. How should I go about investigating this ? How can I find out more infos about what is causing this ? I'm puzzled and a bit worried. Many thanks for any hints. j. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: apache is seg faulting. why ?
Jan 30 10:53:49 webserver /kernel: pid 20682 (httpd), uid 80: exited on signal 11 Please have a look at the output of dmesg. Is apache the only program that sig(s) 11? You may have a hardware problem. Do you use ECC RAM? -- Cordula's Web. http://www.cordula.ws/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: apache is seg faulting. why ?
julien Beauviala wrote: Hello, since about four days, the daily security logs are reporting the following : pid 72041 (httpd), uid 80: exited on signal 11 pid 72040 (httpd), uid 80: exited on signal 11 pid 72099 (httpd), uid 80: exited on signal 11 pid 72039 (httpd), uid 80: exited on signal 11 pid 74202 (httpd), uid 80: exited on signal 11 [etc... lots of lines] When I look at /var/log/messages I find : Jan 30 10:53:49 webserver /kernel: pid 20682 (httpd), uid 80: exited on signal 11 Jan 30 11:43:29 webserver /kernel: pid 24874 (httpd), uid 80: exited on signal 11 Jan 30 13:12:37 webserver /kernel: pid 32084 (httpd), uid 80: exited on signal 11 Jan 30 13:20:49 webserver /kernel: pid 32628 (httpd), uid 80: exited on signal 11 Jan 30 13:20:54 webserver /kernel: pid 32605 (httpd), uid 80: exited on signal 11 Jan 30 13:21:01 webserver /kernel: pid 32629 (httpd), uid 80: exited on signal 11 No idea what is going on, it started four days ago for no reason I can guess. In the apache logs I find no actions that would be in sync with those timestamps. Google was not much help either. How should I go about investigating this ? How can I find out more infos about what is causing this ? I'm puzzled and a bit worried. Many thanks for any hints. Have you loaded any extra modules? (the PHP3-module for example can make Apache to SEGFAULT) If so, check that they are the latest version. Do you run the latest version of Apache? If you're running Apache2, maybe you should try 1.3. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: apache is seg faulting. why ?
Hi, Disable mod-php and test. If you find php to be the culprit, check new php scripts running on the server. Regards SSR From: julien Beauviala [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: apache is seg faulting. why ? Date: Fri, 30 Jan 2004 13:40:34 +0100 Hello, since about four days, the daily security logs are reporting the following : pid 72041 (httpd), uid 80: exited on signal 11 pid 72040 (httpd), uid 80: exited on signal 11 pid 72099 (httpd), uid 80: exited on signal 11 pid 72039 (httpd), uid 80: exited on signal 11 pid 74202 (httpd), uid 80: exited on signal 11 [etc... lots of lines] When I look at /var/log/messages I find : Jan 30 10:53:49 webserver /kernel: pid 20682 (httpd), uid 80: exited on signal 11 Jan 30 11:43:29 webserver /kernel: pid 24874 (httpd), uid 80: exited on signal 11 Jan 30 13:12:37 webserver /kernel: pid 32084 (httpd), uid 80: exited on signal 11 Jan 30 13:20:49 webserver /kernel: pid 32628 (httpd), uid 80: exited on signal 11 Jan 30 13:20:54 webserver /kernel: pid 32605 (httpd), uid 80: exited on signal 11 Jan 30 13:21:01 webserver /kernel: pid 32629 (httpd), uid 80: exited on signal 11 No idea what is going on, it started four days ago for no reason I can guess. In the apache logs I find no actions that would be in sync with those timestamps. Google was not much help either. How should I go about investigating this ? How can I find out more infos about what is causing this ? I'm puzzled and a bit worried. Many thanks for any hints. j. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] _ MSN Hotmail now on your Mobile phone. http://server1.msn.co.in/sp03/mobilesms/ Click here. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
