Hi,
sorry ... from my side (Debian Maintainer), I cant reproduce the
problem. You neither provided logs (suhosin logs to syslog) nor any
example php scripts to verify your problem.
Until I don't have any reproducible facts, I can't anything for you.
Anyways .. maybe the guys from Ubuntu can fix
I think adding the fix to a package in backports is a good compromise.
I wouldn't even suggest necessarily upgrading PHP to a newer version,
just fixing this obvious bug. I don't disagree with your concern that
changing this behavior now may affect people that have already had to
work around it,
The error I get is the same StephenA reported:
ALERT - canary mismatch on efree() - heap overflow detected (attacker
'ip here', file 'file here')
and I get it by calling odbc_execute() or odbc_exec() with any query.
The script I used to reproduce the problem is a simple test script with
just the
To those who are experiencing this issue, and would like it fixed:
PLEASE provide more specific detail on exactly how to reproduce this
issue.
So far, we do not even seem to have information on which release of
Ubuntu is involved, much less which versions of apache2 and php5 and
Joomla. Clear
On my system (this is by no means necessarily complete):
./postfix.config:27:my $distribution = lc(`lsb_release -is 2/dev/null`);
./samba.postinst:125: [ `lsb_release -s -i` = Ubuntu ]
samba depends on lsb-base so it's probably OK. postfix has no way of
doing so here - the only way to make
An attempted set of steps to reproduce this issue follows. I failed to
reproduce it!
Those who can reproduce it, please document, in a way similar to this,
exactly how you (and so others!) can also reproduce this issue.
Just in case the web display on LP messes up my PHP script, I am attaching
** Branch linked: lp:ubuntu/karmic/sigc
--
[intrepid] Rebuild with perl 5.10
https://bugs.launchpad.net/bugs/230016
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap2.3 in ubuntu.
--
Ubuntu-server-bugs mailing list
As a further test, I have also installed php5-suhosin,
rebooted the virtual machine, and then retested it
with 100,000 repetitions using ab.
It all still works fine. /var/log/apache2/error.log contains
no errors relating to canary mismatch, and even doing
sudo grep -ri canary mismatch
