[Python-modules-team] Bug#411487: libapache2-mod-python: md5 calculation conflicts with php5-mhash module

[Jonathan Ballet]

Package: libapache2-mod-python
Version: 3.2.10-3
Severity: important

Hello,

I wanted to deploy a new Django application today, but it didn't work :(
It failed with a SuspiciousOperation exception, which appears to be
related to sessions, which in turns use md5.

You can find some reference to this bug, already reported on the
mod_python mailing list in [1], and a workaround in [2].



I join the test case from [1] in this bug :
 - with php5-mhash installed and activated in Apache, all tests failed
 - after purging php5-mhash AND restarting Apache, all tests passed

So, it seems it's directly related to libmhash2 (as [2] suggests).

I can reproduce on sid-i386. On etch-x86_64, it seems that Apache2
segfault (without php5-mhash, everything is ok) :
================
[Mon Feb 19 13:31:10 2007] [notice] mod_python: (Re)importing module 'test'
[Mon Feb 19 13:31:10 2007] [notice] child pid 16238 exit signal Segmentation fault (11)
================



I think this bug is RC-critical for Etch. However, I'll let
libapache2-mod-python maintainers tag it as appropriate.
I report against libapache2-mod-python, since this is the package
which seems to be affected by the bug. However, feel free to reassign
to php5-mhash or libmhash2.


Thanks !
 - Jonathan


[1] : http://www.modpython.org/pipermail/mod_python/2006-June/021482.html
[2] : http://www.modpython.org/pipermail/mod_python/2006-July/021544.html


-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18.2-rtsp-jon
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libapache2-mod-python depends on:
ii  apache2                     2.2.3-3.2    Next generation, scalable, extenda
ii  apache2-mpm-prefork [apache 2.2.3-3.2    Traditional model for Apache HTTPD
ii  apache2.2-common            2.2.3-3.2    Next generation, scalable, extenda
ii  debconf [debconf-2.0]       1.5.11       Debian configuration management sy
ii  libc6                       2.3.6.ds1-11 GNU C Library: Shared libraries
ii  python                      2.4.4-2      An interactive high-level object-o
ii  python-central              0.5.12       register and build utility for Pyt
ii  python2.4                   2.4.4-2      An interactive high-level object-o

libapache2-mod-python recommends no packages.

-- debconf information excluded
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test.py
Type: text/x-java
Size: 865 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/python-modules-team/attachments/20070219/1cfbc694/test.java