[Bug 574741] [NEW] php5 segfault using gallery2

[John van der Kamp]

Public bug reported:

Binary package hint: libapache2-mod-php5

After upgrading to lucid, visiting my gallery pages segfaulted apache. I
have the following backtrace:

{{{
(gdb) bt
#0  zval_mark_grey (pz=0x7ffff8beefc8) at /build/buildd/php5-5.3.2/Zend/zend_gc.c:356
#1  0x00007ffff3778f35 in gc_collect_cycles () at /build/buildd/php5-5.3.2/Zend/zend_gc.c:417
#2  0x00007ffff375b7a5 in zend_deactivate () at /build/buildd/php5-5.3.2/Zend/zend.c:972
#3  0x00007ffff3707385 in php_request_shutdown (dummy=0x7ffff8beefc8) at /build/buildd/php5-5.3.2/main/main.c:1649
#4  0x00007ffff37e7dc7 in php_handler (r=0x7ffff37e7dc7) at /build/buildd/php5-5.3.2/sapi/apache2handler/sapi_apache2.c:512
#5  0x00007ffff7fd6140 in ap_run_handler (r=0x7ffff86d3128) at /build/buildd/apache2-2.2.14/server/config.c:159
#6  0x00007ffff7fd9aa8 in ap_invoke_handler (r=0x7ffff86d3128) at /build/buildd/apache2-2.2.14/server/config.c:373
#7  0x00007ffff7fe749c in ap_internal_redirect (new_uri=<value optimized out>, r=<value optimized out>) at /build/buildd/apache2-2.2.14/modules/http/http_request.c:501
#8  0x00007ffff1026c95 in ?? () from /usr/lib/apache2/modules/mod_rewrite.so
#9  0x00007ffff7fd6140 in ap_run_handler (r=0x7ffff86ca4a8) at /build/buildd/apache2-2.2.14/server/config.c:159
#10 0x00007ffff7fd9aa8 in ap_invoke_handler (r=0x7ffff86ca4a8) at /build/buildd/apache2-2.2.14/server/config.c:373
#11 0x00007ffff7fe7678 in ap_process_request (r=0x7ffff86ca4a8) at /build/buildd/apache2-2.2.14/modules/http/http_request.c:282
#12 0x00007ffff7fe4528 in ap_process_http_connection (c=0x7ffff86c4308) at /build/buildd/apache2-2.2.14/modules/http/http_core.c:190
#13 0x00007ffff7fddcf8 in ap_run_process_connection (c=0x7ffff86c4308) at /build/buildd/apache2-2.2.14/server/connection.c:43
#14 0x00007ffff7fec037 in child_main (child_num_arg=<value optimized out>) at /build/buildd/apache2-2.2.14/server/mpm/prefork/prefork.c:662
#15 0x00007ffff7fec306 in make_child (s=0x7ffff8214938, slot=0) at /build/buildd/apache2-2.2.14/server/mpm/prefork/prefork.c:702
#16 0x00007ffff7fec953 in ap_mpm_run (_pconf=<value optimized out>, plog=<value optimized out>, s=<value optimized out>) at /build/buildd/apache2-2.2.14/server/mpm/prefork/prefork.c:978
#17 0x00007ffff7fc2350 in main (argc=2, argv=0x7fffffffe0e8) at /build/buildd/apache2-2.2.14/server/main.c:742
}}}

The gallery page I'm viditing has url rewrite enabled. I can visit the main gallery page correctly, but when clicking on any album, the apache child crashes.
After looking at an strace, it maybe caused by a incorrect database upgrade from gallery (which asked my password during the upgrade, but I may have typed it wrong).
Last part of the strace shows:
{{{
poll([{fd=20, events=POLLIN|POLLPRI}], 1, 0) = 0 (Timeout)
write(20, "\10\0\0\0\3COMMIT;", 12)     = 12
read(20, "\7\0\0\1\0\0\0\0\0\0\0", 16384) = 11
poll([{fd=20, events=POLLIN|POLLPRI}], 1, 0) = 0 (Timeout)
write(20, "\21\0\0\0\3set autocommit=1", 21) = 21
read(20, "\7\0\0\1\0\0\0\2\0\0\0", 16384) = 11
chdir("/var/log/apache2")               = 0
umask(022)                              = 022
write(20, "\1\0\0\0\1", 5)              = 5
shutdown(20, 2 /* send and receive */)  = 0
close(20)                               = 0
munmap(0x7f1fcb310000, 528384)          = 0
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++
}}}

** Affects: php5 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
php5 segfault using gallery2
https://bugs.launchpad.net/bugs/574741
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.