From owner-freebsd-questions@FreeBSD.ORG  Wed Oct 15 20:54:04 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 6EC631065687
	for <freebsd-questions@freebsd.org>;
	Wed, 15 Oct 2008 20:54:04 +0000 (UTC) (envelope-from ale@FreeBSD.org)
Received: from lab.alexdupre.com (cl-506.trn-01.it.sixxs.net
	[IPv6:2001:1418:100:1f9::2])
	by mx1.freebsd.org (Postfix) with ESMTP id A26708FC14
	for <freebsd-questions@freebsd.org>;
	Wed, 15 Oct 2008 20:54:03 +0000 (UTC) (envelope-from ale@FreeBSD.org)
Received: (qmail 18755 invoked from network); 15 Oct 2008 20:54:01 -0000
Received: from unknown (HELO athlon.alexdupre.com) (192.168.178.2)
	by lab.alexdupre.com with SMTP; 15 Oct 2008 20:54:01 -0000
Message-ID: <48F65868.50709@FreeBSD.org>
Date: Wed, 15 Oct 2008 22:54:00 +0200
From: Alex Dupre <ale@FreeBSD.org>
User-Agent: Thunderbird 2.0.0.17 (X11/20080928)
MIME-Version: 1.0
To: Jeremy Chadwick <koitsu@FreeBSD.org>
References: <48F62774.2060609@k18.ch> <20081015185509.GB84864@icarus.home.lan>
	<gd5i69$gan$1@ger.gmane.org>
	<20081015201454.GB87853@icarus.home.lan>
In-Reply-To: <20081015201454.GB87853@icarus.home.lan>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: Alain Wolf <wolf@k18.ch>, freebsd-questions@freebsd.org
Subject: Re: [Fwd: Suhosin Segmentation Fault]
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Oct 2008 20:54:04 -0000

Jeremy Chadwick wrote:
> You are supposed to use one or the other: the patch, or the extension.

Nope, they can be used alone or mixed together (I use both on my 
servers). For a detailed explanation see: 
http://www.hardened-php.net/suhosin/why.html

> I'm CC'ing ale@ on this thread, because he's probably not on -questions,
> and this has now become a -ports thing.  He can comment on what to do
> about these crashes.

Compile PHP in debug and post a backtrace. The suhosin author is a 
FreeBSD committer, so he can surely help solving the problem.

> I'm of the opinion that security/php-suhosin should be nuked, especially
> if the patch works fine for everyone but the extension causes problems.

See above.

>> If I disable all other extensions and load only suhosin.so in
>> /usr/local/etc/php/extensions.ini the apache processes are still crashing.

Apache version?

--
Alex Dupre