[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
Can this be replicated on newer Ubuntu releases? Specifically Xenial or Yakkety? Also, is there a small script that you could provide that can be used to trigger this bug on Trusty, that could be used to see if things are fixed already in later releases? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
I have a test system on which I can reproduce the issue and do additional investigation. Given the memory corruption, this may well be a security issue. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
Can you provide steps to reproduce, please? Does it occur on Utopic or on the latest upstream PHP release? If there has been an upstream fix, identifying it so that we can cherry-pick it would be great. Given the memory corruption, this may well be a security issue. Please note that php5-fpm is in universe, so not directly supported by Canonical's security team. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
Steps to reproduce would depend on a private (Drupal-based) codebase and database. I'll go upstream, and report back. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
It's beginning to look like a stack overflow segfault caused by recursion or infinite loop. I'll turn off the security switch for now. ** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
I have a test system on which I can reproduce the issue and do additional investigation. Given the memory corruption, this may well be a security issue. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
Can you provide steps to reproduce, please? Does it occur on Utopic or on the latest upstream PHP release? If there has been an upstream fix, identifying it so that we can cherry-pick it would be great. Given the memory corruption, this may well be a security issue. Please note that php5-fpm is in universe, so not directly supported by Canonical's security team. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
Steps to reproduce would depend on a private (Drupal-based) codebase and database. I'll go upstream, and report back. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
It's beginning to look like a stack overflow segfault caused by recursion or infinite loop. I'll turn off the security switch for now. ** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
This is the core dump. ** Attachment added: core-php5-fpm.16825.bz2 https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+attachment/4243073/+files/core-php5-fpm.16825.bz2 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c
This is the core dump. ** Attachment added: core-php5-fpm.16825.bz2 https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+attachment/4243073/+files/core-php5-fpm.16825.bz2 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs