I'm hoping for any update on this bug. From the stack trace I took last
week, we're running into the same problem on multiple servers, crashing
the site multiple times a day during moderately busy periods.
The workaround listed from Kian Mohageri of using "zend.enable_gc=0"
changes the problem from Apache crashing with a Segmentation Fault, to
Apache hanging (with load level of 150/4 and higher), and refusing to
respond to any more requests. 4GB of memory is completely consumed by
Apache at this time. Nothing else is running on this system.
I'm running into this on two different systems, with two different
kernels. 2.6.32-5-686-bigmem, and 2.6.32-5-amd64. I don't have a stack
trace handy for the amd64 kernel, but here's the 686 kernel stack trace
from prior to the workaround listed above;
Hardware: ESXi 3.5
Linux web1 2.6.32-5-686-bigmem #1 SMP Mon Jun 13 05:03:09 UTC 2011 i686
GNU/Linux
root@web1: cat /etc/issue
Debian GNU/Linux 6.0 \n \l
+++-========================-========================-================================================================
ii php5 5.3.3-7+squeeze3 server-side,
HTML-embedded scripting language (metapackage)
ii php5-adodb 5.04-6 Extension
optimising the ADOdb database abstraction library
ii php5-auth-pam 0.4-10+b1 A PHP5 extension
for PAM authentication
ii php5-cgi 5.3.3-7+squeeze3 server-side,
HTML-embedded scripting language (CGI binary)
ii php5-cli 5.3.3-7+squeeze3 command-line
interpreter for the php5 scripting language
ii php5-common 5.3.3-7+squeeze3 Common files for
packages built from the php5 source
ii php5-curl 5.3.3-7+squeeze3 CURL module for php5
ii php5-dbg 5.3.3-7+squeeze3 Debug symbols for PHP5
ii php5-dev 5.3.3-7+squeeze3 Files for PHP5
module development
un php5-enchant <none> (no description available)
ii php5-ffmpeg 0.6.0-2 audio and video
support via ffmpeg for php5
ii php5-gd 5.3.3-7+squeeze3 GD module for php5
ii php5-geoip 1.0.7-2 GeoIP module for php5
ii php5-gmp 5.3.3-7+squeeze3 GMP module for php5
ii php5-idn 1.2b-6 PHP API for the
IDNA library
ii php5-imagick 3.0.0~rc1-1 ImageMagick module
for php5
ii php5-imap 5.3.3-7+squeeze3 IMAP module for php5
ii php5-interbase 5.3.3-7+squeeze3 interbase/firebird
module for php5
un php5-intl <none> (no description available)
un php5-json <none> (no description available)
ii php5-lasso 2.2.1-4+b1 Library for
Liberty Alliance and SAML protocols - PHP 5 bindings
ii php5-ldap 5.3.3-7+squeeze3 LDAP module for php5
ii php5-mapscript 5.6.5-2+squeeze2 php5-cgi module
for MapServer
ii php5-mcrypt 5.3.3-7+squeeze3 MCrypt module for php5
ii php5-memcache 3.0.4-4 memcache extension
module for PHP5
un php5-mhash <none> (no description available)
ii php5-ming 1:0.4.3-1+b1 Ming module for php5
ii php5-mysql 5.3.3-7+squeeze3 MySQL module for php5
un php5-mysqli <none> (no description available)
ii php5-odbc 5.3.3-7+squeeze3 ODBC module for php5
rc php5-pgsql 5.3.3-7+squeeze3 PostgreSQL module
for php5 (THIS WAS REMOVED AFTER THE STACK TRACE)
ii php5-ps 1.3.6-3+b1 ps module for PHP 5
ii php5-pspell 5.3.3-7+squeeze3 pspell module for php5
ii php5-recode 5.3.3-7+squeeze3 recode module for php5
ii php5-sasl 0.1.0-1+b1 Cyrus SASL
extension for PHP 5
ii php5-snmp 5.3.3-7+squeeze3 SNMP module for php5
un php5-sqlite <none> (no description available)
ii php5-suhosin 0.9.32.1-1 advanced
protection module for php5
un php5-sybase <none> (no description available)
ii php5-tidy 5.3.3-7+squeeze3 tidy module for php5
ii php5-xcache 1.3.0-7 Fast, stable PHP
opcode cacher
ii php5-xmlrpc 5.3.3-7+squeeze3 XML-RPC module for
php5
ii php5-xsl 5.3.3-7+squeeze3 XSL module for php5
Core was generated by `/usr/sbin/apache2 -k start'.
Program terminated with signal 11, Segmentation fault.
#0 0xb6e44cb5 in _zend_hash_add_or_update (ht=0xb8581dfc,
arKey=0xb8a37c28 "REMOTE_ADDR", nKeyLength=<unknown type>,
pData=0xbfb04e68, nDataSize=<unknown type>, pDest=0xbfb04e64, flag=1)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:413
413
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:
No such file or directory.
in
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c
(gdb) bt full
#0 0xb6e44cb5 in _zend_hash_add_or_update (ht=0xb8581dfc,
arKey=0xb8a37c28 "REMOTE_ADDR", nKeyLength=<unknown type>,
pData=0xbfb04e68, nDataSize=<unknown type>, pDest=0xbfb04e64, flag=1)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:413
h = <unknown type>
p = 0xb8581dfc
#1 0xb6debeec in php_register_variable_ex (var_name=0xb8c6dfdc
"REMOTE_ADDR", val=0xbfb04eec,
track_vars_array=0xb8581d94) at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.h:348
p = 0x498d0a4b <Address 0x498d0a4b out of bounds>
ip = 0x0
index = 0xb8a37c28 "REMOTE_ADDR"
escaped_index = 0xb8a37c28 "REMOTE_ADDR"
var = 0xb8a37c28 "REMOTE_ADDR"
var_orig = 0xb8a37c28 "REMOTE_ADDR"
var_len = 11
index_len = 11
gpc_element = 0xb8c7746c
gpc_element_p = 0xb8c1fe88
is_array = 20 '\024'
symtable1 = 0xb8581dfc
var_name = 0xb8583914 "\217\211ACS\201IC"
#2 0xb6c352ed in php_sapi_filter (arg=4, var=0xb17bd487 "REMOTE_ADDR",
val=0xbfb04f9c, val_len=<unknown type>,
new_val_len=0x0) at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/ext/filter/filter.c:484
new_var = {value = {lval = -1194918048, dval =
2.6995577325436058e-313, str = {
val = 0xb8c6ff60 "65.52.56.128", len = 12}, ht =
0xb8c6ff60, obj = {handle = <unknown type>,
handlers = 0xc}}, refcount__gc = <unknown type>, type = 6
'\006', is_ref__gc = 79 'O'}
raw_var = {value = {lval = -1195239844, dval =
2.6995418337087489e-313, str = {
val = 0xb8c2165c "65.52.56.128", len = 12}, ht =
0xb8c2165c, obj = {handle = <unknown type>,
handlers = 0xc}}, refcount__gc = <unknown type>, type = 6
'\006', is_ref__gc = 0 '\000'}
array_ptr = 0xb8c772f0
orig_array_ptr = 0xb8581d94
orig_var = 0xb8c6dfdc "REMOTE_ADDR"
retval = 0
arg = -1202177772
var = 0xb8581d94 "\374\035X\270"
val = 0xbfb04f9c
#3 0xb17af053 in suhosin_input_filter_wrapper () from
/usr/lib/php5/20090626+lfs/suhosin.so
No symbol table info available.
#4 0xb6de56c4 in sapi_getenv (name=0xb17bd487 "REMOTE_ADDR",
name_len=<unknown type>)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/main/SAPI.c:944
name = 0x0
name_len = <unknown type>
value = 0xb8c1fe88 "65.52.56.128"
tmp = 0xb8583914 "\217\211ACS\201IC"
value = 0xb8c1fe88 "65.52.56.128"
#5 0xb17b25e1 in suhosin_log () from /usr/lib/php5/20090626+lfs/suhosin.so
No symbol table info available.
#6 0xb6e57d10 in _zend_mm_free_canary_int (heap=0xb8122620, p=0xb06f4f24)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_alloc_canary.c:2090
p = 0x498d0a4b <Address 0x498d0a4b out of bounds>
mm_block = 0x41050043
next_block = 0xb06f4f24
size = <unknown type>
heap = 0xb8122620
p = 0xb06f4f24
#7 0xb6e17628 in _efree (ptr=0xb06f4f24)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_alloc.c:2616
ptr = 0xb06f4f24
#8 0xb6e2dbcb in destroy_op_array (op_array=0xb89a5e68)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_opcode.c:239
opline = 0xb06f4f24
end = 0xb8583914
i = <unknown type>
op_array = 0xb89a5e68
#9 0xb6e2dd82 in destroy_zend_function (function=0xb89a5e68)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_opcode.c:115
function = 0xb8583914
#10 0xb6e2ddad in zend_function_dtor (function=0xb89a5e68)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_opcode.c:127
function = 0xb8583914
#11 0xb6e43104 in zend_hash_destroy (ht=0xb8a17860)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:726
p = 0xb88aaadc
ht = 0xb8a17860
#12 0xb6e2de41 in destroy_zend_class (pce=0xb877464c)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_opcode.c:191
ce = 0xb8a17844
pce = 0xb8583914
#13 0xb6e42d7a in zend_hash_apply_deleter (ht=0xb8a17844, p=0xb8774640)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:813
retval = 0xb8583914
#14 0xb6e42e9c in zend_hash_reverse_apply (ht=0xb8197b80,
apply_func=0xb6e287b0 <clean_non_persistent_class>)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_hash.c:962
result = -1197377468
p = 0x498d0a4b
#15 0xb6e296e8 in shutdown_executor ()
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend_execute_API.c:310
__orig_bailout = <incomplete type>
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__orig_bailout = <incomplete type>
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
__bailout = {{__jmpbuf = {-1222014660, -1221887840,
-1226614240, -1078946712, 487207632, -1190805310},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb093b4}}}
#16 0xb6e366cf in zend_deactivate () at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/Zend/zend.c:962
__orig_bailout = 0x0
__bailout = {{__jmpbuf = {-1222014660, -1221888960,
-1221888744, -1078946504, 486929104, -1159695678},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
__orig_bailout = 0x0
__bailout = {{__jmpbuf = {-1222014660, -1221888960,
-1221888744, -1078946504, 486929104, -1159695678},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
__orig_bailout = 0xbfb094a8
__bailout = {{__jmpbuf = {-1222014660, -1221888960,
-1221888744, -1078946504, 486929104, -1159695678},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
__orig_bailout = 0x439ead1b
__bailout = {{__jmpbuf = {-1222014660, -1221888960,
-1221888744, -1078946504, 486929104, -1159695678},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
__orig_bailout = 0xbfb094a8
__bailout = {{__jmpbuf = {-1222014660, -1221888960,
-1221888744, -1078946504, 486929104, -1159695678},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
__orig_bailout = 0x0
__bailout = {{__jmpbuf = {-1222014660, -1221888960,
-1221888744, -1078946504, 486929104, -1159695678},
__mask_was_saved = 0, __saved_mask = {__val = 0xbfb09494}}}
#17 0xb6ddae98 in php_request_shutdown (dummy=0x0)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/main/main.c:1649
report_memleaks = 1 '\001'
#18 0xb6ec864c in php_handler (r=0xb8756288)
at
/build/buildd-php5_5.3.3-7+squeeze3-i386-H_HNTR/php5-5.3.3/sapi/apache2handler/sapi_apache2.c:526
ctx = 0xb8757708
conf = 0xb85c61b8
brigade = 0xb8757bc0
bucket = 0xb8583914
rv = -1202177772
parent_req = 0x0
#19 0xb778a541 in ap_run_handler (r=0xb8756288) at
/tmp/buildd/apache2-2.2.16/server/config.c:159
n = 4
rv = <value optimized out>
#20 0xb778e346 in ap_invoke_handler (r=0xb8756288) at
/tmp/buildd/apache2-2.2.16/server/config.c:377
handler = 0xb80a7590 "application/x-httpd-php"
result = <value optimized out>
old_handler = 0xb80a7590 "application/x-httpd-php"
ignore = <value optimized out>
#21 0xb779db14 in ap_internal_redirect (new_uri=0xb8756278 "/index.php",
r=0xb84f2260)
at /tmp/buildd/apache2-2.2.16/modules/http/http_request.c:502
new = 0xb8756288
access_status = -1202177772
#22 0xb653c7fd in handler_redirect (r=0xb84f2260) at
/tmp/buildd/apache2-2.2.16/modules/mappers/mod_rewrite.c:4848
No locals.
#23 0xb778a541 in ap_run_handler (r=0xb84f2260) at
/tmp/buildd/apache2-2.2.16/server/config.c:159
n = 5
rv = <value optimized out>
#24 0xb778e346 in ap_invoke_handler (r=0xb84f2260) at
/tmp/buildd/apache2-2.2.16/server/config.c:377
handler = 0xb6541237 "redirect-handler"
result = <value optimized out>
old_handler = 0xb6541237 "redirect-handler"
ignore = <value optimized out>
#25 0xb779dcc8 in ap_process_request (r=0xb84f2260) at
/tmp/buildd/apache2-2.2.16/modules/http/http_request.c:282
access_status = -1202177772
#26 0xb779a7e8 in ap_process_http_connection (c=0xb85b5930) at
/tmp/buildd/apache2-2.2.16/modules/http/http_core.c:190
r = 0xb84f2260
csd = 0x0
#27 0xb7792dc1 in ap_run_process_connection (c=0xb85b5930) at
/tmp/buildd/apache2-2.2.16/server/connection.c:43
n = 3
rv = <value optimized out>
#28 0xb77a318a in child_main (child_num_arg=<value optimized out>)
at /tmp/buildd/apache2-2.2.16/server/mpm/prefork/prefork.c:662
current_conn = <value optimized out>
csd = 0xb85b5798
ptrans = 0xb85b5758
allocator = 0xb85b36c8
status = <value optimized out>
i = <value optimized out>
lr = <value optimized out>
pollset = 0xb85b37f8
sbh = 0xb85b37f0
bucket_alloc = 0xb85b99a8
last_poll_idx = 1
#29 0xb77a350e in make_child (s=<value optimized out>, slot=162)
at /tmp/buildd/apache2-2.2.16/server/mpm/prefork/prefork.c:758
No locals.
#30 0xb77a44bb in perform_idle_server_maintenance (_pconf=0xb7e980a8,
plog=0xb7eca170, s=0xb7e9c8e8)
at /tmp/buildd/apache2-2.2.16/server/mpm/prefork/prefork.c:893
i = 25
idle_count = -1216666736
free_length = <value optimized out>
free_slots = {93, 94, 97, 99, 103, 105, 112, 113, 114, 116,
121, 122, 123, 130, 137, 139, 142, 144, 153, 154,
155, 158, 160, 161, 162, 163, 164, 167, 168, 170, 174, 175}
last_non_dead = <value optimized out>
total_non_dead = 158
#31 ap_mpm_run (_pconf=0xb7e980a8, plog=0xb7eca170, s=0xb7e9c8e8)
at /tmp/buildd/apache2-2.2.16/server/mpm/prefork/prefork.c:1097
status = 0
pid = {pid = -1, in = 0xb76c0466, out = 0xb7e92008, err = 0x0}
child_slot = <value optimized out>
exitwhy = APR_PROC_EXIT
processed_status = 32
index = <value optimized out>
remaining_children_to_start = <value optimized out>
rv = <value optimized out>
#32 0xb7774fa2 in main (argc=3, argv=0xbfb09d84) at
/tmp/buildd/apache2-2.2.16/server/main.c:742
c = 0 '\000'
configtestonly = -1216718076
confname = 0xb77a636f "apache2.conf"
def_server_root = 0xb77a6362 "/etc/apache2"
temp_error_log = 0xb77a654c "Pre-configuration failed"
error = <value optimized out>
process = 0xb7e96130
server_conf = <value optimized out>
pglobal = 0xb77a6580
pconf = 0xb7e980a8
plog = 0xb7eca170
ptemp = 0xb7ed1188
pcommands = 0xb7e9a0b0
opt = 0xb7e9a150
rv = <value optimized out>
mod = <value optimized out>
optarg = 0xb77a59fa "\201\303", <incomplete sequence \372\245>
Thank you for your time. Any help is appreciated.
Shane Chambers
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
