Gentoo Archives: gentoo-hardened

From: pageexec@××××××××.hu
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Apache2 segfaults
Date: Sun, 04 May 2008 13:25:56
Message-Id: 481DD568.2014.1485A5@pageexec.freemail.hu
In Reply to: [gentoo-hardened] Apache2 segfaults by atoth@atoth.sote.hu
1 On 2 May 2008 at 21:44, atoth@××××××××××.hu wrote:
2
3 > May 2 21:28:09 localhost grsec: From 62.165.243.164: signal 11 sent to
4 > /usr/sbin/apache2[apache2:5119] uid/euid:81/81 gid/egid:81/81, parent
5 > /usr/sbin/apache2[apache2:5035] uid/euid:0/0 gid/egid:0/0
6 > May 2 21:28:09 localhost apache2[17861]: segfault at 0000000b eip
7 > 4b931a47 esp 5c8bf040 error 4"
8 >
9 > The setup seems to work quite well despite the error messages after
10 > restarting apache following a php version bump.
11 > Has anyone experienced error logs like this?
12
13 it's clearly a null (data ptr) deref in apache, since you've got
14 the IP address and date, you can grep the corresponding requests
15 from the apache logs and see if you can replay/reproduce them,
16 then you can debug it.
17
18 --
19 gentoo-hardened@l.g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] Apache2 segfaults atoth@××××××××××.hu