[php-maint] Bug#543525: php5-cgi causes segmention fault

[Felix Lenders]

Package: php5-cgi
Version: 5.2.10.dfsg.1-2
Severity: important

Hello,

after the last php update 4 or 5 days ago in testing, serendipity (version from debian testing) causes 500 errors which results from segfaults in 
php5-cgi. With php-dbg I backtraced it:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb77886e0 (LWP 30628)]        
0x082da6b0 in _zend_hash_add_or_update (ht=0xa1ae2c4, arKey=0xa1a78b0 "FCGI_ROLE", nKeyLength=<error type>, pData=0xbff3a224, nDataSize=<error 
type>, 
    pDest=0xbff3a220, flag=1) at /tmp/buildd/php5-5.2.10.dfsg.1/Zend/zend_hash.c:447                                                                  
447     /tmp/buildd/php5-5.2.10.dfsg.1/Zend/zend_hash.c: No such file or directory.                                                                   
        in /tmp/buildd/php5-5.2.10.dfsg.1/Zend/zend_hash.c
(gdb) bt
#0  0x082da6b0 in _zend_hash_add_or_update (ht=0xa1ae2c4, arKey=0xa1a78b0 "FCGI_ROLE", nKeyLength=<error type>, pData=0xbff3a224,
    nDataSize=<error type>, pDest=0xbff3a220, flag=1) at /tmp/buildd/php5-5.2.10.dfsg.1/Zend/zend_hash.c:447
#1  0x08292394 in php_register_variable_ex (var_name=0xa1de268 "FCGI_ROLE", val=0xbff3a288, track_vars_array=0xa1ae7e4)
    at /tmp/buildd/php5-5.2.10.dfsg.1/Zend/zend_hash.h:341
#2  0x080faaea in php_sapi_filter (arg=4, var=0xa1de268 "FCGI_ROLE", val=0xa1de254, val_len=<error type>, new_val_len=0xbff3a334)
    at /tmp/buildd/php5-5.2.10.dfsg.1/ext/filter/filter.c:396
#3  0xb67a7787 in suhosin_input_filter_wrapper () from /usr/lib/php5/20060613+lfs/suhosin.so
#4  0x08348244 in cgi_php_import_environment_variables (array_ptr=0xa1a68b8) at /tmp/buildd/php5-5.2.10.dfsg.1/sapi/cgi/cgi_main.c:618
#5  0x08291718 in php_auto_globals_create_env (name=0x8355813 "_ENV", name_len=<error type>) at 
/tmp/buildd/php5-5.2.10.dfsg.1/main/php_variables.c:820
#6  0x08293378 in php_hash_environment () at /tmp/buildd/php5-5.2.10.dfsg.1/main/php_variables.c:711
#7  0x08283ad5 in php_request_startup () at /tmp/buildd/php5-5.2.10.dfsg.1/main/main.c:1309
#8  0x083472a9 in main (argc=1, argv=0xbff3c8a4) at /tmp/buildd/php5-5.2.10.dfsg.1/sapi/cgi/cgi_main.c:1916
(gdb) cont
Continuing.

This only happens with serendipity, roundcube and gallery2 work fine and only occured after the last php update. Which further information do you 
need?

Thank you,
Felix

-- System Information:
Debian Release: 5.0.2
  APT prefers stable
  APT policy: (500, 'stable'), (101, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686-bigmem (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages php5-cgi depends on:
ii  libbz2-1.0          1.0.5-1              high-quality block-sorting file co
ii  libc6               2.9-23               GNU C Library: Shared libraries
ii  libcomerr2          1.41.3-1             common error description library
ii  libdb4.7            4.7.25-7             Berkeley v4.7 Database Libraries [
ii  libgssapi-krb5-2    1.7dfsg~beta3-1      MIT Kerberos runtime libraries - k
ii  libk5crypto3        1.7dfsg~beta3-1      MIT Kerberos runtime libraries - C
ii  libkrb5-3           1.7dfsg~beta3-1      MIT Kerberos runtime libraries
ii  libmagic1           4.26-1               File type determination library us
ii  libpcre3            7.8-2+b1             Perl 5 Compatible Regular Expressi
ii  libssl0.9.8         0.9.8g-15+lenny1     SSL shared libraries
ii  libxml2             2.6.32.dfsg-5+lenny1 GNOME XML library
ii  mime-support        3.44-1               MIME files 'mime.types' & 'mailcap
ii  php5-common         5.2.10.dfsg.1-2      Common files for packages built fr
ii  tzdata              2009g-0lenny1        time zone and daylight-saving time
ii  ucf                 3.0016               Update Configuration File: preserv
ii  zlib1g              1:1.2.3.3.dfsg-12    compression library - runtime

php5-cgi recommends no packages.

Versions of packages php5-cgi suggests:
ii  php-pear                 5.2.10.dfsg.1-2 PEAR - PHP Extension and Applicati

-- no debconf information