Please someone from Cpanel take a look!

aag73

Member
Mar 28, 2008
20
0
51
Mexico
I have had this problem on ALL of my 8 Cpanel servers for the last 3 months. I have asked for help in different forums in regards to this issue but noone seems to know of a solution to this. My cpanel error_log is filled with similar errors to this (this one is reported by Chirpy's CSF).

I have tried

1) reboot -> doesn't help
2) /scripts/makecpphp -> doesn't help, by the way it seems to rebuild a different cpanel php. There are several cpanel's php from what I gather.
3) easyapache on WHM -> doesn't help as well.
4) /scripts/upcp (even with "force") -> doesn't help.

Several customers have reported "Internal Server Errors" while sending from squirrel or horde since this has happenned. Please someone from Cpanel take a look.

Time: Mon Aug 25 11:56:55 2008 -0500
PID: 21016
Account: XXXX
Uptime: 78 seconds


Executable:

/var/cpanel/3rdparty/bin/php


Command Line (often faked in exploits):

/var/cpanel/3rdparty/bin/php
/usr/local/cpanel/base/3rdparty/squirrelmail/src/download.php

Network connections by the process (if any):

tcp: 127.0.0.1:59631 -> 127.0.0.1:143

Files open by the process (if any):

/usr/local/cpanel/logs/error_log

Memory maps by the process (if any):

00111000-001a1000 r-xp 00000000 08:03 76046 /usr/lib/libkrb5.so.3.3
001a1000-001a4000 rwxp 0008f000 08:03 76046 /usr/lib/libkrb5.so.3.3
001e3000-00210000 r-xp 00000000 08:03 76049 /usr/lib/libgssapi_krb5.so.2.2
00210000-00211000 rwxp 0002d000 08:03 76049 /usr/lib/libgssapi_krb5.so.2.2
00213000-00215000 r-xp 00000000 08:05 786639 /lib/libkeyutils-1.2.so
00215000-00216000 rwxp 00001000 08:05 786639 /lib/libkeyutils-1.2.so
002bd000-002fe000 r-xp 00000000 08:05 787941 /lib/libssl.so.0.9.8b
002fe000-00302000 rwxp 00040000 08:05 787941 /lib/libssl.so.0.9.8b
00304000-003f7000 r-xp 00000000 08:03 68086 /usr/lib/libmysqlclient.so.14.0.0
003f7000-00438000 rwxp 000f2000 08:03 68086 /usr/lib/libmysqlclient.so.14.0.0
00438000-0043a000 rwxp 00438000 00:00 0
0048d000-004b2000 r-xp 00000000 08:03 70501 /usr/lib/libpng12.so.0.10.0
004b2000-004b3000 rwxp 00024000 08:03 70501 /usr/lib/libpng12.so.0.10.0
00719000-00733000 r-xp 00000000 08:05 786450 /lib/ld-2.5.so
00733000-00734000 r-xp 00019000 08:05 786450 /lib/ld-2.5.so
00734000-00735000 rwxp 0001a000 08:05 786450 /lib/ld-2.5.so
00737000-00874000 r-xp 00000000 08:05 786457 /lib/libc-2.5.so
00874000-00876000 r-xp 0013d000 08:05 786457 /lib/libc-2.5.so
00876000-00877000 rwxp 0013f000 08:05 786457 /lib/libc-2.5.so
00877000-0087a000 rwxp 00877000 00:00 0
0087c000-0087e000 r-xp 00000000 08:05 786463 /lib/libdl-2.5.so
0087e000-0087f000 r-xp 00001000 08:05 786463 /lib/libdl-2.5.so
0087f000-00880000 rwxp 00002000 08:05 786463 /lib/libdl-2.5.so
00882000-008a7000 r-xp 00000000 08:05 786467 /lib/libm-2.5.so
008a7000-008a8000 r-xp 00024000 08:05 786467 /lib/libm-2.5.so
008a8000-008a9000 rwxp 00025000 08:05 786467 /lib/libm-2.5.so
008c4000-008d6000 r-xp 00000000 08:03 67966 /usr/lib/libz.so.1.2.3
008d6000-008d7000 rwxp 00011000 08:03 67966 /usr/lib/libz.so.1.2.3
008d9000-00914000 r-xp 00000000 08:05 786642 /lib/libsepol.so.1
00914000-00915000 rwxp 0003a000 08:05 786642 /lib/libsepol.so.1
00915000-0091f000 rwxp 00915000 00:00 0
00921000-00937000 r-xp 00000000 08:05 786644 /lib/libselinux.so.1
00937000-00939000 rwxp 00015000 08:05 786644 /lib/libselinux.so.1
00946000-0094f000 r-xp 00000000 08:05 786485 /lib/libcrypt-2.5.so
0094f000-00950000 r-xp 00008000 08:05 786485 /lib/libcrypt-2.5.so
00950000-00951000 rwxp 00009000 08:05 786485 /lib/libcrypt-2.5.so
00951000-00978000 rwxp 00951000 00:00 0
0097a000-0098d000 r-xp 00000000 08:05 786481 /lib/libnsl-2.5.so
0098d000-0098e000 r-xp 00012000 08:05 786481 /lib/libnsl-2.5.so
0098e000-0098f000 rwxp 00013000 08:05 786481 /lib/libnsl-2.5.so
0098f000-00991000 rwxp 0098f000 00:00 0
00a8c000-00a97000 r-xp 00000000 08:05 786456 /lib/libgcc_s-4.1.2-20080102.so.1
00a97000-00a98000 rwxp 0000a000 08:05 786456 /lib/libgcc_s-4.1.2-20080102.so.1
00b6f000-00b82000 r-xp 00000000 08:05 786628 /lib/libaudit.so.0.0.0
00b82000-00b84000 rwxp 00013000 08:05 786628 /lib/libaudit.so.0.0.0
00b86000-00b90000 r-xp 00000000 08:05 786637 /lib/libpam.so.0.81.5
00b90000-00b91000 rwxp 0000a000 08:05 786637 /lib/libpam.so.0.81.5
00b93000-00b95000 r-xp 00000000 08:03 68010 /usr/lib/libXau.so.6.0.0
00b95000-00b96000 rwxp 00001000 08:03 68010 /usr/lib/libXau.so.6.0.0
00b98000-00ba8000 r-xp 00000000 08:03 68088 /usr/lib/libXpm.so.4.11.0
00ba8000-00ba9000 rwxp 00010000 08:03 68088 /usr/lib/libXpm.so.4.11.0
00bab000-00bb0000 r-xp 00000000 08:03 68048 /usr/lib/libXdmcp.so.6.0.0
00bb0000-00bb1000 rwxp 00004000 08:03 68048 /usr/lib/libXdmcp.so.6.0.0
00c74000-00c76000 r-xp 00000000 08:05 786701 /lib/libcom_err.so.2.1
00c76000-00c77000 rwxp 00001000 08:05 786701 /lib/libcom_err.so.2.1
00c79000-00c88000 r-xp 00000000 08:05 786473 /lib/libresolv-2.5.so
00c88000-00c89000 r-xp 0000e000 08:05 786473 /lib/libresolv-2.5.so
00c89000-00c8a000 rwxp 0000f000 08:05 786473 /lib/libresolv-2.5.so
00c8a000-00c8c000 rwxp 00c8a000 00:00 0
00c8e000-00dab000 r-xp 00000000 08:05 787111 /lib/libcrypto.so.0.9.8b
00dab000-00dbe000 rwxp 0011c000 08:05 787111 /lib/libcrypto.so.0.9.8b
00dbe000-00dc1000 rwxp 00dbe000 00:00 0
00dc9000-00dee000 r-xp 00000000 08:03 76045 /usr/lib/libk5crypto.so.3.1
00dee000-00def000 rwxp 00025000 08:03 76045 /usr/lib/libk5crypto.so.3.1
00df1000-00df9000 r-xp 00000000 08:03 67986 /usr/lib/libkrb5support.so.0.1
00df9000-00dfa000 rwxp 00007000 08:03 67986 /usr/lib/libkrb5support.so.0.1
03f40000-0403f000 r-xp 00000000 08:03 68071 /usr/lib/libX11.so.6.2.0
0403f000-04043000 rwxp 000ff000 08:03 68071 /usr/lib/libX11.so.6.2.0
045f6000-046d6000 r-xp 00000000 08:03 68097 /usr/lib/libstdc++.so.6.0.8
046d6000-046da000 r-xp 000df000 08:03 68097 /usr/lib/libstdc++.so.6.0.8
046da000-046db000 rwxp 000e3000 08:03 68097 /usr/lib/libstdc++.so.6.0.8
046db000-046e1000 rwxp 046db000 00:00 0
06893000-068b4000 r-xp 00000000 08:03 73466 /usr/lib/libjpeg.so.62.0.0
068b4000-068b5000 rwxp 00020000 08:03 73466 /usr/lib/libjpeg.so.62.0.0
08048000-08469000 r-xp 00000000 08:02 919553 /var/cpanel/3rdparty/bin/php
08469000-0848f000 rwxp 00421000 08:02 919553 /var/cpanel/3rdparty/bin/php
0848f000-08497000 rwxp 0848f000 00:00 0
09be6000-09fa6000 rwxp 09be6000 00:00 0
b7b49000-b7d49000 r-xp 00000000 08:03 73334 /usr/lib/locale/locale-archive
b7d49000-b7d52000 r-xp 00000000 08:05 786472 /lib/libnss_files-2.5.so
b7d52000-b7d53000 r-xp 00008000 08:05 786472 /lib/libnss_files-2.5.so
b7d53000-b7d54000 rwxp 00009000 08:05 786472 /lib/libnss_files-2.5.so
b7d54000-b7e3f000 r-xp 00000000 08:03 1049155 /usr/local/IonCube/ioncube_loader_lin_5.2.so
b7e3f000-b7e44000 rwxp 000ea000 08:03 1049155 /usr/local/IonCube/ioncube_loader_lin_5.2.so
b7e51000-b7e85000 r-xp 0167f000 08:03 73334 /usr/lib/locale/locale-archive
b7e85000-b7e89000 rwxp b7e85000 00:00 0
b7e89000-b7f9e000 r-xp 00000000 08:05 1507462 /opt/xml2/lib/libxml2.so.2.6.32
b7f9e000-b7fa3000 rwxp 00114000 08:05 1507462 /opt/xml2/lib/libxml2.so.2.6.32
b7fa3000-b7fa7000 rwxp b7fa3000 00:00 0
b7faa000-b7fab000 r-xp 016bf000 08:03 73334 /usr/lib/locale/locale-archive
b7fab000-b7fb0000 r-xp 016b8000 08:03 73334 /usr/lib/locale/locale-archive
b7fb0000-b7fb1000 rwxp b7fb0000 00:00 0
b7fb1000-b7fb2000 r-xp b7fb1000 00:00 0 [vdso]
bfca9000-bfcbd000 rwxp bfca9000 00:00 0 [stack]
bfcbd000-bfcbe000 rw-p bfcbd000 00:00 0
 

aag73

Member
Mar 28, 2008
20
0
51
Mexico
By the way, these are the type of errors showing up in cpanel's error_log:

*** glibc detected *** /var/cpanel/3rdparty/bin/php: double free or corruption (out): 0x0947a5a0 ***
======= Backtrace: =========
/lib/libc.so.6[0x79fb16]
/lib/libc.so.6(cfree+0x90)[0x7a3030]
/var/cpanel/3rdparty/bin/php[0x82681f1]
/var/cpanel/3rdparty/bin/php(zend_hash_reverse_apply+0x57)[0x82682b7]
/var/cpanel/3rdparty/bin/php(shutdown_executor+0x2f4)[0x8252e24]
/var/cpanel/3rdparty/bin/php(zend_deactivate+0x53)[0x825eac3]
/var/cpanel/3rdparty/bin/php(php_request_shutdown+0xfc)[0x821fb7c]
/var/cpanel/3rdparty/bin/php(main+0x9bf)[0x82d68cf]
/lib/libc.so.6(__libc_start_main+0xdc)[0x74cdec]
/var/cpanel/3rdparty/bin/php(realloc+0x91)[0x808b761]
======= Memory map: ========
00111000-001a1000 r-xp 00000000 08:03 76046 /usr/lib/libkrb5.so.3.3
001a1000-001a4000 rwxp 0008f000 08:03 76046 /usr/lib/libkrb5.so.3.3
001e3000-00210000 r-xp 00000000 08:03 76049 /usr/lib/libgssapi_krb5.so.2.2
00210000-00211000 rwxp 0002d000 08:03 76049 /usr/lib/libgssapi_krb5.so.2.2
00213000-00215000 r-xp 00000000 08:05 786639 /lib/libkeyutils-1.2.so
00215000-00216000 rwxp 00001000 08:05 786639 /lib/libkeyutils-1.2.so
002bd000-002fe000 r-xp 00000000 08:05 787941 /lib/libssl.so.0.9.8b
002fe000-00302000 rwxp 00040000 08:05 787941 /lib/libssl.so.0.9.8b
00304000-003f7000 r-xp 00000000 08:03 68086 /usr/lib/libmysqlclient.so.14.0.0
003f7000-00438000 rwxp 000f2000 08:03 68086 /usr/lib/libmysqlclient.so.14.0.0
00438000-0043a000 rwxp 00438000 00:00 0
0048d000-004b2000 r-xp 00000000 08:03 70501 /usr/lib/libpng12.so.0.10.0
004b2000-004b3000 rwxp 00024000 08:03 70501 /usr/lib/libpng12.so.0.10.0
00719000-00733000 r-xp 00000000 08:05 786450 /lib/ld-2.5.so
00733000-00734000 r-xp 00019000 08:05 786450 /lib/ld-2.5.so
00734000-00735000 rwxp 0001a000 08:05 786450 /lib/ld-2.5.so
00737000-00874000 r-xp 00000000 08:05 786457 /lib/libc-2.5.so
00874000-00876000 r-xp 0013d000 08:05 786457 /lib/libc-2.5.so
00876000-00877000 rwxp 0013f000 08:05 786457 /lib/libc-2.5.so
00877000-0087a000 rwxp 00877000 00:00 0
0087c000-0087e000 r-xp 00000000 08:05 786463 /lib/libdl-2.5.so
0087e000-0087f000 r-xp 00001000 08:05 786463 /lib/libdl-2.5.so
0087f000-00880000 rwxp 00002000 08:05 786463 /lib/libdl-2.5.so
00882000-008a7000 r-xp 00000000 08:05 786467 /lib/libm-2.5.so
008a7000-008a8000 r-xp 00024000 08:05 786467 /lib/libm-2.5.so
008a8000-008a9000 rwxp 00025000 08:05 786467 /lib/libm-2.5.so
008c4000-008d6000 r-xp 00000000 08:03 67966 /usr/lib/libz.so.1.2.3
008d6000-008d7000 rwxp 00011000 08:03 67966 /usr/lib/libz.so.1.2.3
008d9000-00914000 r-xp 00000000 08:05 786642 /lib/libsepol.so.1
00914000-00915000 rwxp 0003a000 08:05 786642 /lib/libsepol.so.1
00915000-0091f000 rwxp 00915000 00:00 0
00921000-00937000 r-xp 00000000 08:05 786644 /lib/libselinux.so.1
00937000-00939000 rwxp 00015000 08:05 786644 /lib/libselinux.so.1
00946000-0094f000 r-xp 00000000 08:05 786485 /lib/libcrypt-2.5.so
0094f000-00950000 r-xp 00008000 08:05 786485 /lib/libcrypt-2.5.so
00950000-00951000 rwxp 00009000 08:05 786485 /lib/libcrypt-2.5.so
00951000-00978000 rwxp 00951000 00:00 0
0097a000-0098d000 r-xp 00000000 08:05 786481 /lib/libnsl-2.5.so
0098d000-0098e000 r-xp 00012000 08:05 786481 /lib/libnsl-2.5.so
0098e000-0098f000 rwxp 00013000 08:05 786481 /lib/libnsl-2.5.so
0098f000-00991000 rwxp 0098f000 00:00 0
00a8c000-00a97000 r-xp 00000000 08:05 786456 /lib/libgcc_s-4.1.2-20080102.so.1
00a97000-00a98000 rwxp 0000a000 08:05 786456 /lib/libgcc_s-4.1.2-20080102.so.1
00b6f000-00b82000 r-xp 00000000 08:05 786628 /lib/libaudit.so.0.0.0
00b82000-00b84000 rwxp 00013000 08:05 786628 /lib/libaudit.so.0.0.0
00b86000-00b90000 r-xp 00000000 08:05 786637 /lib/libpam.so.0.81.5
00b90000-00b91000 rwxp 0000a000 08:05 786637 /lib/libpam.so.0.81.5
00b93000-00b95000 r-xp 00000000 08:03 68010 /usr/lib/libXau.so.6.0.0
00b95000-00b96000 rwxp 00001000 08:03 68010 /usr/lib/libXau.so.6.0.0
00b98000-00ba8000 r-xp 00000000 08:03 68088 /usr/lib/libXpm.so.4.11.0
00ba8000-00ba9000 rwxp 00010000 08:03 68088 /usr/lib/libXpm.so.4.11.0
00bab000-00bb0000 r-xp 00000000 08:03 68048 /usr/lib/libXdmcp.so.6.0.0
00bb0000-00bb1000 rwxp 00004000 08:03 68048 /usr/lib/libXdmcp.so.6.0.0
00c74000-00c76000 r-xp 00000000 08:05 786701 /lib/libcom_err.so.2.1
00c76000-00c77000 rwxp 00001000 08:05 786701 /lib/libcom_err.so.2.1
00c79000-00c88000 r-xp 00000000 08:05 786473 /lib/libresolv-2.5.so
00c88000-00c89000 r-xp 0000e000 08:05 786473 /lib/libresolv-2.5.so
00c89000-00c8a000 rwxp 0000f000 08:05 786473 /lib/libresolv-2.5.so
00c8a000-00c8c000 rwxp 00c8a000 00:00 0
00c8e000-00dab000 r-xp 00000000 08:05 787111 /lib/libcrypto.so.0.9.8b
00dab000-00dbe000 rwxp 0011c000 08:05 787111 /lib/libcrypto.so.0.9.8b
00dbe000-00dc1000 rwxp 00dbe000 00:00 0
00dc9000-00dee000 r-xp 00000000 08:03 76045 /usr/lib/libk5crypto.so.3.1
00dee000-00def000 rwxp 00025000 08:03 76045 /usr/lib/libk5crypto.so.3.1
00df1000-00df9000 r-xp 00000000 08:03 67986 /usr/lib/libkrb5support.so.0.1
00df9000-00dfa000 rwxp 00007000 08:03 67986 /usr/lib/libkrb5support.so.0.1
03f40000-0403f000 r-xp 00000000 08:03 68071 /usr/lib/libX11.so.6.2.0
0403f000-04043000 rwxp 000ff000 08:03 68071 /usr/lib/libX11.so.6.2.0
045f6000-046d6000 r-xp 00000000 08:03 68097 /usr/lib/libstdc++.so.6.0.8
046d6000-046da000 r-xp 000df000 08:03 68097 /usr/lib/libstdc++.so.6.0.8
046da000-046db000 rwxp 000e3000 08:03 68097 /usr/lib/libstdc++.so.6.0.8
046db000-046e1000 rwxp 046db000 00:00 0
06893000-068b4000 r-xp 00000000 08:03 73466 /usr/lib/libjpeg.so.62.0.0
068b4000-068b5000 rwxp 00020000 08:03 73466 /usr/lib/libjpeg.so.62.0.0
08048000-08469000 r-xp 00000000 08:02 919553 /var/cpanel/3rdparty/bin/php
08469000-0848f000 rwxp 00421000 08:02 919553 /var/cpanel/3rdparty/bin/php
0848f000-08497000 rwxp 0848f000 00:00 0
0936e000-0981e000 rwxp 0936e000 00:00 0
b7900000-b7921000 rwxp b7900000 00:00 0
b7921000-b7a00000 ---p b7921000 00:00 0
b7ab9000-b7ac0000 r-xs 00000000 08:03 99042 /usr/lib/gconv/gconv-modules.cache
b7ac0000-b7ac1000 r-xp 00c16000 08:03 73334 /usr/lib/locale/locale-archive
b7ac1000-b7cc1000 r-xp 00000000 08:03 73334 /usr/lib/locale/locale-archive
b7cc1000-b7cca000 r-xp 00000000 08:05 786472 /lib/libnss_files-2.5.so
b7cca000-b7ccb000 r-xp 00008000 08:05 786472 /lib/libnss_files-2.5.so
b7ccb000-b7ccc000 rwxp 00009000 08:05 786472 /lib/libnss_files-2.5.so
b7ccc000-b7db7000 r-xp 00000000 08:03 1049155 /usr/local/IonCube/ioncube_loader_lin_5.2.so
b7db7000-b7dbc000 rwxp 000ea000 08:03 1049155 /usr/local/IonCube/ioncube_loader_lin_5.2.so
b7dc5000-b7dfd000 r-xp 0167f000 08:03 73334 /usr/lib/locale/locale-archive
b7dfd000-b7e01000 rwxp b7dfd000 00:00 0
b7e01000-b7f16000 r-xp 00000000 08:05 1507462 /opt/xml2/lib/libxml2.so.2.6.32
b7f16000-b7f1b000 rwxp 00114000 08:05 1507462 /opt/xml2/lib/libxml2.so.2.6.32
b7f1b000-b7f1f000 rwxp b7f1b000 00:00 0
b7f27000-b7f28000 r-xp 0171f000 08:03 73334 /usr/lib/locale/locale-archive
b7f28000-b7f29000 rwxp b7f28000 00:00 0
b7f29000-b7f2a000 r-xp b7f29000 00:00 0 [vdso]
bf977000-bf98c000 rwxp bf977000 00:00 0 [stack]