[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#323785: marked as done (cgid segfaults when module set suexec uid and gid)



Your message dated Sat, 11 Nov 2006 20:14:16 +0100
with message-id <1163272456.3347.33.camel@darwin.os9.nl>
and subject line Fixed in 2.2.3-3
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: libapache2-mod-vhost-ldap
Version: 0.2.3-1
Severity: important

mod-vhost-ldap segfaults when used with the Apache2 worker MPM, with 
suExec and cgid enabled. (The Debian packages ensure cgid is used 
with the worker MPM.)

Here is a gdb backtrace, suitably cut:

(gdb) bt
#0  0x405d0e8c in mod_vhost_ldap_get_suexec_id_doer (r=0x818e0b8)
    at mod_vhost_ldap.c:468
#1  0x08095a85 in ap_run_get_suexec_identity ()
#2  0x08095c85 in ap_os_create_privileged_process ()
#3  0x40586506 in ?? () from /usr/lib/apache2/modules/mod_cgid.so

The module tries to do

mod_vhost_ldap_config_t *cfg =
  (mod_vhost_ldap_config_t *)ap_get_module_config(r->server->module_config,
                                                  &vhost_ldap_module);

Which fails because r->server->module_config is null. At least I think 
that's why it fails.

(gdb) print r->server->module_config
$1 = (struct ap_conf_vector_t *) 0x0

I'm trying to figure out what this means, just recording this here.

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages libapache2-mod-vhost-ldap depends on:
ii  apache2-common              2.0.54-4     next generation, scalable, extenda
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libldap2                    2.1.30-8     OpenLDAP libraries

-- no debconf information


--- End Message ---
--- Begin Message ---
Version: 2.2.3-3

Hi,

> mod-vhost-ldap segfaults when used with the Apache2 worker MPM, with 
> suExec and cgid enabled. (The Debian packages ensure cgid is used 
> with the worker MPM.)

I've verified that this has been fixed upstream and that this fix is
indeed in the current Debian package. I'm closing this bug.

Thanks for reporting.

Thijs

Attachment: signature.asc
Description: This is a digitally signed message part


--- End Message ---

Reply to: