Re: suhosin[6894]: ALERT - canary mismatch on efree(). Is freeTDS 64 Bit the problem?

Hi all,

sorry I forgot the freeTDS installation.

freeTDS: v0.82, compiled.
         ./configure --with-tdsver=8.0
         make
         make install

tds.driver-file:
[FreeTDS]
Description = v0.82 with protocol v8.0
Driver      = /usr/local/lib/libtdsodbc.so

Installing the driver:
odbcinst -i -d -f tds.driver

tds.datasource-file:
[MSSQLServer]
Driver      = FreeTDS
Description = database
Trace       = No
Server      = IP_SQL_Server.
Port        = 1433
Database    = database_to_connect.

Installing:
odbcinst -i -s -f tds.datasource


Peter

> From: [email protected]
> To: [email protected]
> Date: Mon, 27 Apr 2009 22:11:48 +0200
> Subject: [freetds] suhosin[6894]: ALERT - canary mismatch on efree(). Is freeTDS 64 Bit the problem?
> 
> 
> Hi all.
> 
> SQL select commands under PHP to MS SQL-Server via unixODBC and freeTDS 
> returns invalid data under openSUSE x86_64 (openSUSE 10.2 and 11.1).
> In /var/log/messages I have
> ... suhosin[6894]: ALERT - canary mismatch on efree() - heap overflow detected (attacker 'IP', file '...', line ...)
> ... suhosin[6895]: ALERT - canary mismatch on efree() - heap overflow detected (attacker 'IP', file '...', line ...)
> And in /var/log/apache2/error_log I have
> ... [error] [client IP] ALERT - canary mismatch on efree() - heap overflow detected (attacker 'IP', file '...', line ...)
> ... [error] [client IP] ALERT - canary mismatch on efree() - heap overflow detected (attacker 'IP', file '...', line ...)
> 
> The SAME SQL selects are CORRECT under openSUSE x86_32 (openSUSE 10.2 and 11.1).
> 
> Is freeTDS 64 Bit the problem?
> 
> The job:
> PHP under openSUSE 10.2 x86_64 has to connect to MS SQL-Server 2000.
> 
> OS: openSUSE 10.2 x86_64, standard installation, no GUI, only text.
> Apache: v2.2.3, SUSE RPM.
> PHP: v5.2.0-10, SUSE RPM.
> 
> php -v returns
> PHP 5.2.0 with Suhosin-Patch 0.9.6.1 (cli) (built: Nov 27 2006 22:39:24)
> Copyright (c) 1997-2006 The PHP Group
> Zend Engine v2.2.0, Copyright (c) 1998-2006 Zend Technologies
> 
> unixODBC: v2.2.14, compiled.
>           ./configure --enable-gui=no
>           make
>           make install
> 
> Connection to MS SQL-Server on console:
> isql -v MSSQLServer user password
> +---------------------------------------+
> | Connected!                                       |
> |                                                       |
> | sql-statement                                    |
> | help [tablename]                                |
> | quit                                                 |
> |                                                       |
> +---------------------------------------+
> 
> The SQL-select-commands HERE ARE OK.
> 
> Also: The logs of unixODBC and freeTDS show that all data arriving correct.
> 
> Up to here all seems to be ok.
> 
> Now PHP.
> Compiling odbc.so from php-src SUSE RPM (v5.2.0-10, the same version as the installed PHP).
> phpize
> ./configure --with-unixODBC=shared,/usr/local
> make
> make install
> 
> In the file /etc/phph5/apache2/php.ini I insert:
> extension = odbc.so
> Then: /etc/init.d/apache2 restart.
> 
> I have two PHP-scripts, see below:
> script1: select on a MS SQL table with 1 record: script1 returns nothing.
> script2: select on a MS SQL table with 10389 records: script2 returns 10283 records.
> So here the result is NOT correct.
> The suhosin errors from above are then in /var/log/messages and in /var/log/apache2/error_log.
> 
> An analog installation on openSUSE 10.2 x86_32:
> script1: select on a MS SQL table with 1 record: script1 returns 1 record.
> script2: select on a MS SQL table with 10389 records: script2 returns 10389 records.
> So here the result is correct.
> No suhosin error occur.
> 
> So:
> 32 Bit seems to be ok.
> 64 Bit seems to be ok up to unixODBC und freeTDS.
> But PHP is not ok.
> 
> An analog installation on openSUSE 11.1 has the same result:
> 32 Bit seems to be ok.
> 64 Bit seems to be ok up to unixODBC und freeTDS.
> But PHP (here v5.2.6-49.13) is not ok.
> 
> An analog installation on openSUSE 10.2 with the trial easysoft driver.
> 64 Bit is OK, PHP is returns the correct results.
> 
> Is this a driver-problem?
> Because with 64-Bit easysoft driver I get correct results.
> With 64-Bit freeTDS driver I get no correct results.
> 
> Has someone an idea?
> Thank you.
> 
> ----------------------------
> 
> Here are the PHP-scripts.
> Only the tables in the select-command are different.
> 
> <?php
> 
>     error_reporting(E_ALL);
> 
>     $dsn="Driver=FreeTDS;TDS_Version=8.0;Server=IP_to_SQL_Server;Port=1433;Database=database_to_connect;UID=user;PWD=password";
> 
>     $connect = odbc_connect($dsn, "user", "password");
> 
>     print "Connect: $connect";
> 
>     $query = "SELECT * FROM table";
> 
>     $result = odbc_exec($connect, $query);
> 
>     while(odbc_fetch_row($result)) {
>     $field1 = odbc_result($result, 1);
>     $field2 = odbc_result($result, 2);
>     $field3 = odbc_result($result, 3);
>     $field4 = odbc_result($result, 4);
>     print("$field1 $field2 $field3 $field4\n");
>     print "<hr>";
>     }
> 
>     odbc_close($connect);
> 
> ?>
> 
> 
> _________________________________________________________________
> http://redirect.gimas.net/?n=M0904xWLCalendar2
> Keinen Termin mehr verpassen! Mit Windows Live Kalender.
> _______________________________________________
> FreeTDS mailing list
> [email protected]
> http://lists.ibiblio.org/mailman/listinfo/freetds

_________________________________________________________________
http://redirect.gimas.net/?n=M0904xIE8_MSN4
Internet Explorer 8 jetzt für MSN  - kostenlos!