Bug 470828 – dev-vcs/subversion-1.7.9 USE=apache2 - segfaults in apache on certain URLs

• Status: RESOLVED OBSOLETE
• Product: Gentoo Linux

[Description Paul Klapperich 2013-05-20 22:25:44 UTC]

With the apache usefalg set and "APACHE2_OPTS=" ... -D svn ..." certain URLs cause segfaults in apache and result in "No data received" errors in Chrome or "Connection reset" errors in Firefox.

1 URL that cause this breakage are in the URLs for mediawiki's CSS. ex:
https://wiki.mysite/wiki/load.php?lang=en&modules=mediawiki.legacy.commonPrint%2Cshared%7Cskins.monobook&skin=monobook&*


Reproducible: Always

Steps to Reproduce:
1. emerge apache2 (currently 2.2.24), subversion-1.7.9 with apache2 useflag, and mediawiki (currently 
2. Complete the wiki setup and copy LocalSettings.php to your wiki root.
3. Verify your wiki works and looks nice.
4. Clear your browser cache.
5. Edit your /etc/conf.d/apache.conf and add "-D svn" to your APACHE2_OPTS="" variable
6. Restart apache2
7. Reload your wiki. Notice there is no style sheet.
8. Tail /var/log/apache/error_log
Actual Results:  
At step 3 the wiki loads with a stylesheet
At step 7 the wiki loads but without a stylesheet
At step 8, you should see an error such as:
[Mon May 20 17:20:07 2013] [notice] child pid 12586 exit signal Segmentation fault (11)

Expected Results:  
The wiki should look the same in steps 3 and step 7. Apache should not segfault.

My assumption is that either the length of the stylesheet URL or some of the special characters (such as %7C which is a |) are being mishandled by the svn module. Note that it is not necessary that any vhost actually load the svn module for this bug to assert!

[Comment 1 Paul Klapperich 2013-05-20 22:29:02 UTC]

Step 1 should read:
1. emerge apache2 (currently 2.2.24), subversion-1.7.9 with apache2 useflag, and mediawiki (currently 1.20.5).

[Comment 2 Jeroen Roovers (RETIRED) 2013-05-21 14:55:14 UTC]

1) Please post your `emerge --info' output in a comment.
2) Please attach the relevant error_log output.

[Comment 3 Paul Klapperich 2013-05-21 16:35:51 UTC]

Created attachment 348836 [details]
output of emerge --info

[Comment 4 Paul Klapperich 2013-05-21 16:40:17 UTC]

Here's the result of pressing "Ctrl+Refresh" several times in step 7:

tail -Fn1 /var/log/apache2/error_log                                                                                                                                    
[Tue May 21 11:25:53 2013] [notice] child pid 26615 exit signal Segmentation fault (11)
[Tue May 21 11:32:06 2013] [notice] child pid 26770 exit signal Segmentation fault (11)
[Tue May 21 11:32:06 2013] [notice] child pid 28114 exit signal Segmentation fault (11)
[Tue May 21 11:32:06 2013] [notice] child pid 29062 exit signal Segmentation fault (11)
[Tue May 21 11:32:07 2013] [notice] child pid 21956 exit signal Segmentation fault (11)
[Tue May 21 11:32:07 2013] [notice] child pid 28116 exit signal Segmentation fault (11)
[Tue May 21 11:32:07 2013] [notice] child pid 28780 exit signal Segmentation fault (11)
[Tue May 21 11:32:18 2013] [notice] child pid 26621 exit signal Segmentation fault (11)
[Tue May 21 11:32:19 2013] [notice] child pid 28115 exit signal Segmentation fault (11)

I've followed the troubleshooting instructions in http://www.gentoo.org/proj/en/apache/doc/troubleshooting.xml#doc_chap3 to rebuild the apache tool stack. I've also rebuilt dev-vcs/subversion and everything that depends on it.

[Comment 5 Reinhard Biegel 2013-05-23 11:06:29 UTC]

I reported this bug on php.net, which might be related.
https://bugs.php.net/bug.php?id=64836

Sadly I cannot reproduce it anymore...

[Comment 6 Thomas Sachau 2016-08-06 17:01:17 UTC]

As this is about a version no longer in the tree and not reproducable by the reporter, i will close this bug as obsolete.

If this happens again with a current version, please open a new bug with the details.