Gentoo Archives: gentoo-hardened

From: atoth@××××××××××.hu
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Apache2 segfaults
Date: Sun, 04 May 2008 15:13:19
Message-Id: 63023.62.165.243.164.1209913992.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] Apache2 segfaults by pageexec@freemail.hu
1 The IP address is the one I used to log in from. The messages were thrown
2 after restarting the service without any obvious interaction to the
3 daemon.
4 It's a NULL pointer deref. First I try to test it without eaccelerator.
5
6 Regards,
7 Dw.
8 --
9 dr Tóth Attila, Radiológus Szakorvos jelölt, 06-20-825-8057, 06-30-5962-962
10 Attila Toth MD, Radiologist in Training, +36-20-825-8057, +36-30-5962-962
11
12 On Vas, Május 4, 2008 15:25, pageexec@××××××××.hu wrote:
13 > On 2 May 2008 at 21:44, atoth@××××××××××.hu wrote:
14 >
15 >> May 2 21:28:09 localhost grsec: From 62.165.243.164: signal 11 sent to
16 >> /usr/sbin/apache2[apache2:5119] uid/euid:81/81 gid/egid:81/81, parent
17 >> /usr/sbin/apache2[apache2:5035] uid/euid:0/0 gid/egid:0/0
18 >> May 2 21:28:09 localhost apache2[17861]: segfault at 0000000b eip
19 >> 4b931a47 esp 5c8bf040 error 4"
20 >>
21 >> The setup seems to work quite well despite the error messages after
22 >> restarting apache following a php version bump.
23 >> Has anyone experienced error logs like this?
24 >
25 > it's clearly a null (data ptr) deref in apache, since you've got
26 > the IP address and date, you can grep the corresponding requests
27 > from the apache logs and see if you can replay/reproduce them,
28 > then you can debug it.
29 >
30 > --
31 > gentoo-hardened@l.g.o mailing list
32 >
33
34
35 --
36 gentoo-hardened@l.g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] Apache2 segfaults pageexec@××××××××.hu