php5 RADIUS module crash

[Jakob Schlyter]

Binary package hint: php5-radius

keijiban> lsb_release -rd
Description: Ubuntu 9.10
Release: 9.10

keijiban> uname -a
Linux keijiban.kirei.se 2.6.31-14-generic #48-Ubuntu SMP Fri Oct 16 14:05:01 UTC 2009 x86_64 GNU/Linux

keijiban> dpkg -l | grep php5
ii libapache2-mod-php5 5.2.10.dfsg.1-2ubuntu6.3 server-side, HTML-embedded scripting languag
ii php5 5.2.10.dfsg.1-2ubuntu6.3 server-side, HTML-embedded scripting languag
ii php5-cli 5.2.10.dfsg.1-2ubuntu6.3 command-line interpreter for the php5 script
ii php5-common 5.2.10.dfsg.1-2ubuntu6.3 Common files for packages built from the php
ii php5-curl 5.2.10.dfsg.1-2ubuntu6.3 CURL module for php5
ii php5-dbg 5.2.10.dfsg.1-2ubuntu6.3 Debug symbols for PHP5
ii php5-mcrypt 5.2.6-0ubuntu2 MCrypt module for php5
ii php5-mhash 5.2.10.dfsg.1-2ubuntu6.3 MHASH module for php5
ii php5-mysql 5.2.10.dfsg.1-2ubuntu6.3 MySQL module for php5
ii php5-radius 1.2.5-2 PECL radius module for PHP 5
ii php5-xdebug 2.0.4-2 Xdebug Module for PHP 5
keijiban> cat radius-example.php
<?php

    $radius = radius_auth_open();

    if (! radius_add_server($radius,'127.0.0.1',1812,'radiussecret',5,3))
    {
        die('Radius Error: ' . radius_strerror($radius));
    }

    if (! radius_create_request($radius,RADIUS_ACCESS_REQUEST))
    {
        die('Radius Error: ' . radius_strerror($radius));
    }

    radius_put_attr($radius,RADIUS_USER_NAME,'username');
    radius_put_attr($radius,RADIUS_USER_PASSWORD,'password');

    switch (radius_send_request($radius))
    {
        case RADIUS_ACCESS_ACCEPT:
            echo 'GOOD LOGIN';
            break;
        case RADIUS_ACCESS_REJECT:
            echo 'BAD LOGIN';
            break;
        case RADIUS_ACCESS_CHALLENGE:
            echo 'CHALLENGE REQUESTED';
            break;
        default:
            die('Radius Error: ' . radius_strerror($radius));
    }

?>

keijiban> php5 radius-example.php
Segmentation fault

keijiban> gdb /usr/bin/php5
GNU gdb (GDB) 7.0-ubuntu
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/php5...Reading symbols from /usr/lib/debug/usr/bin/php5...done.
(no debugging symbols found)...done.
(gdb) run radius-example.php
Starting program: /usr/bin/php5 radius-example.php
[Thread debugging using libthread_db enabled]
[New Thread 0x7ffff0f90910 (LWP 21991)]
[Thread 0x7ffff0f90910 (LWP 21991) exited]

Program received signal SIGSEGV, Segmentation fault.
zend_do_fcall_common_helper_SPEC (execute_data=0x7fffffffc0b0)
    at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:205
205 /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h: No such file or directory.
 in /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h
(gdb) bt
#0 zend_do_fcall_common_helper_SPEC (execute_data=0x7fffffffc0b0)
    at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:205
#1 0x000000000068e29c in execute (op_array=0xd91b28)
    at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:92
#2 0x00007ffff42c1a3e in xdebug_execute (op_array=0xd91b28)
    at /build/buildd/xdebug-2.0.4/build-php5/xdebug.c:1561
#3 0x000000000066a176 in zend_execute_scripts (type=32767, retval=0x0,
    file_count=3) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend.c:1215
#4 0x0000000000625203 in php_execute_script (primary_file=0x0)
    at /build/buildd/php5-5.2.10.dfsg.1/main/main.c:2047
#5 0x00000000006e6594 in main (argc=0, argv=0x7ffff7fec4c0)
    at /build/buildd/php5-5.2.10.dfsg.1/sapi/cli/php_cli.c:1170
(gdb) quit
A debugging session is active.

 Inferior 1 [process 21975] will be killed.

Quit anyway? (y or n) y

[Jakob Schlyter (jakob-kirei)]

Seems to work on i386, but not on amd64.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Thijs Kinkhorst (kink)]

Fixed in 1.2.5-2.3