I've configured a Debian 5 LAMP server for hosting my personal projects and blog. I've basically followed the standard steps as recommended in the wiki. Of course, the official Debian PHP package/Apache module comes with Suhosin compiled in, of course, and I'm having some major issues with it.

My VM is low-end with 360MB of memory, and has a very low load. It'w running Wordpress. Often, when doing administrative tasks in Wordpress, or if it's regenerating indexes etc, my PHP instance will completely crash due to what Suhosin thinks is an attack (false-positive), and hence my site is unreachable. Here's the line from my Apache error.log:

[Mon Dec 14 18:42:31 2009] [error] [client x.x.x.x] ALERT - linked list corrupt on efree() - heap corruption detected (attacker 'x.x.x.x', file '/path/to/index.php')

Has anybody else encountered this? I'm tried fiddling with the suhosin settings, and it helped a bit, but I'm still encountering crashes. Has anybody else encountered this, perhaps?

Thanks in advance,
George

I don't know Wordpress, but sounds like maybe a bug? What version of Wordpress are you running? What modules/plugins? Knowing the PHP file that's listed in the error message would probably help diagnosis, or at least whether it's always the same file. Hopefully someone more experienced can chime in.

If it's a bug, and it looks like it, then it's either in Suhosin, PHP or mod_php if used. What version of those are you running?