From owner-freebsd-questions@FreeBSD.ORG Sat Sep 26 18:06:48 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9D959106566C for ; Sat, 26 Sep 2009 18:06:48 +0000 (UTC) (envelope-from gesbbb@yahoo.com) Received: from smtp109.prem.mail.ac4.yahoo.com (smtp109.prem.mail.ac4.yahoo.com [76.13.13.92]) by mx1.freebsd.org (Postfix) with SMTP id 41AF58FC15 for ; Sat, 26 Sep 2009 18:06:48 +0000 (UTC) Received: (qmail 17435 invoked from network); 26 Sep 2009 18:06:47 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:Received:Date:From:To:Subject:Message-ID:In-Reply-To:References:Reply-To:Organization:X-Mailer:Face:Mime-Version:Content-Type:Content-Transfer-Encoding; b=bl0SFZQ6ShhCNAGoT6jXkqDSD3Q4wgtMmZyvzYgJA4RHgkQwtN1ASeW5w3wMtIYn5RYIIag7DzzkfomlqtwzCIjgAWkn7h2u+SY9mt3c8qUjCG1sUd0K4qN1oDrgoskex7CSX2yozdonbY/4aL+Hz4P+cLXQ6cbJJI/9ffTX8dk= ; Received: from c-67-189-183-172.hsd1.ny.comcast.net (gesbbb@67.189.183.172 with login) by smtp109.prem.mail.ac4.yahoo.com with SMTP; 26 Sep 2009 11:06:47 -0700 PDT X-Yahoo-SMTP: yeAAMgKswBATCul4lSbCWspvTA-- X-YMail-OSG: kbXNivQVM1kLtbUQNeV8XCPR9eDPjncOvTYg0sG40rYeSZxL9cIwbkV_2XlGFnEkkB.wTHFcBA.l89vj6oSZoKgIPMt_w_cdaPE1GWDkzXmQIWL2WxpSb3NU3qKoznm1A9w9nQ7kh3YW4ZECRfTF1DUnpJGbswi4hWRaOB_.UoE2b4..hv5uX0mTtmw0q.2GFxe5tlLYibT27n.5hClutKiiXZfjn5Ason.m5olBmofvX60wagIl_ZpGG8S8Y_Yfm5f_ogJN_zg4Oa.xtISdaD5LOnXVXB6Lh156bqShnonzso6T211KNKGCWcCeRrVJoOzG04dJ3CZpPLYK.o44IDlrQ.GzYLFZdj9Z1w-- X-Yahoo-Newman-Property: ymail-3 Received: from scorpio.seibercom.net (scorpio.seibercom.net [192.168.1.103]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: gesbbb@scorpio.seibercom.net) by scorpio.seibercom.net (Postfix) with ESMTPSA id 265D82284A for ; Sat, 26 Sep 2009 14:06:47 -0400 (EDT) Date: Sat, 26 Sep 2009 14:06:46 -0400 From: Jerry To: freebsd-questions@freebsd.org Message-ID: <20090926140646.12921239@scorpio.seibercom.net> In-Reply-To: References: Organization: seibercom.net X-Mailer: Claws Mail 3.7.2 (GTK+ 2.16.6; i386-portbld-freebsd7.2) Face: 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 X-Face: "\j?x](l|]4p?-1Bf@!wN<&p=$.}^k-HgL}cJKbQZ3r#Ar]\%U(#6}'?<3s7%(%(gxJxxcR Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: Warning: PHP Update from 5.2.10 to 5.2.11 and FastCGI X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-questions@freebsd.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Sep 2009 18:06:48 -0000 On Sat, 26 Sep 2009 13:34:25 -0400 Michael Powell wrote: > Today I did a portupgrade of PHP from 5.2.10 to 5.2.11. > > This broke both lighttpd and Apache web servers, on which I run PHP > as FastCGI. I do not know if this affects those who use mod_php as I > do not use it. I use mod_fcgid instead. > > Execute php -v at a prompt and it will spew the following and > segfault. > > testbed suhosin[48982]: ALERT - canary mismatch on efree() - heap > overflow detected (attacker 'REMOTE_ADDR not set', file 'unknown') > > If you are using FastCGI the workaround is to do make config in > lang/php5 and deselect the Suhosin option. There is something very > broken in the Suhosin patch as far as CLI and FastCGI is concerned. > > -Mike No problems on my machines. PHP 5.2.11 with Suhosin-Patch 0.9.7 (cli) (built: Sep 24 2009 19:08:59) Copyright (c) 1997-2009 The PHP Group Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies Did you rebuild all of the ports that depend on PHP? I used portmanager with the '-p' option to update all dependencies. portmanager -u -l -y -p That should get everything working.Update you ports system first however. -- Jerry gesbbb@yahoo.com A life spent in search of the perfect hash brownie is a life well spent.