Bug 244049 - lang/php73: php 7.3.14 crashes under ASLR enabled, on FreeBSD 12.1
Summary: lang/php73: php 7.3.14 crashes under ASLR enabled, on FreeBSD 12.1
Status: New
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: amd64 Any
: --- Affects Some People
Assignee: Torsten Zuehlsdorff
URL:
Keywords: crash
Depends on:
Blocks:
 
Reported: 2020-02-11 15:38 UTC by Özgür Kazancci
Modified: 2020-02-13 18:02 UTC (History)
2 users (show)

See Also:

Attachments
truss trace dump of the command (178.24 KB, text/plain)
2020-02-11 15:38 UTC, Özgür Kazancci 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Özgür Kazancci 2020-02-11 15:38:59 UTC 
Created attachment 211564 [details]
truss trace dump of the command

When I execute:
/usr/local/bin/php -q /var/www/mysite/whmcs/crons/cron.php,
PHP crashes giving: Segmentation Fault (Core Dumped)


However, under /etc/sysctl.conf when I remove/disable the following lines related to ASLR (they were activated/added by me):

kern.elf64.aslr.pie_enable=1
kern.elf64.aslr.honor_sbrk=0
kern.elf64.aslr.enable=1
kern.elf32.aslr.pie_enable=1
kern.elf32.aslr.honor_sbrk=0
kern.elf32.aslr.enable=1

PHP executes the cron.php script fine without crashing.

OS: FreeBSD 12.1, latest stable branch.
PHP version: 7.3.14

Thank you,
Regards.
Comment 1 Özgür Kazancci 2020-02-11 15:45:39 UTC 
Comment on attachment 211564 [details]
truss trace dump of the command

I can see that a SEGV_MAPERR is occurring, This usually indicates that PHP is trying to access an invalid memory page for some reason and fails. It is unclear as to whether the issue is with ASLR or PHP itself (and ASLR just happens to reveal it)
Comment 2 Torsten Zuehlsdorff freebsd_committer 2020-02-13 18:02:16 UTC 
Hi Özgür,

thank you for the issue. I am unsure if i can do something about it. Did you also opened a bugreport at https://bugs.php.net/? I think this should also be there!

Greetings,
Torsten