So as you know timthumb had an awesome exploit in it that allowed my entire server to be compromised prompting a complete upgrade server-wide which I blogged about at length(http://blog.netflowdevelopments.com/2011/10/13/timthumb-exploit-causing-plethora-of-sites-to-redirect-to-russia/).  Well almost as awesome as timthumb being full of bullshit security holes before the upgrade is it not working at all after the upgrade because of the error message mentioned in the title.

This was made even more awesome when I went to referenced url of the image in question and saw that it loaded fine.  Cooooollll!

So I went into the timthumb.php file and found this line

define (‘DEBUG_ON’, false);

and turned it into this

define (‘DEBUG_ON’, true);

and then found this:

define (‘DEBUG_LEVEL’, 1);

and turned it into this

define (‘DEBUG_LEVEL’, 3);

This exposed a whole new level of insanity with the following nonsensical errors

[Mon Oct 31 01:02:37 2011] [error] [client 127.0.0.1] TimThumb Debug line 1076 [0.000327 : 0.000198] Doc root is: /path/to/domain
[Mon Oct 31 01:02:37 2011] [error] [client 127.0.0.1] TimThumb Debug line 1076 [0.000327 : 0.000198] Found file as /path/to/domain/wp-content/uploads/2009/11/ComfortInn1.jpg
[Mon Oct 31 01:02:37 2011] [error] [client 127.0.0.1] TimThumb Debug line 1076 [0.001643 : 0.000392]: Security block: The file specified occurs outside the document root.

W-T-F?!?!?! it’s telling me that a file which lies within my specific Doc root is simulataneously outside my Doc root and being blocked?!?  It was this point that I had to focus really hard against the urges of bashing my head in with the nearest blunt object I could find.

What I ended up doing was going through the script looking for that specific error message and lucky for me there are 3 of them, so I changed the wording of them so that instead of reading Security Block… they read Security Block1… and then Security Block 2… etc etc for each instance of it so I could narrow down where this madness was stemming from, which resulting in the following results:

[Mon Oct 31 02:10:58 2011] [error] [client 127.0.0.1] TimThumb Debug line 1076 [0.000792 : 0.000643]: Is a request for an internal file: /wp-content/uploads/2009/11/ComfortInn1.jpg

[Mon Oct 31 02:10:58 2011] [error] [client 127.0.0.1] TimThumb Debug line 1076 [0.001497 : 0.000697]: Security block1: The file specified occurs outside the document root.

[Mon Oct 31 02:10:58 2011] [error] [client 127.0.0.1] TimThumb Debug line 1076 [0.002205 : 0.000691]: Security block3: The file specified occurs outside the document root.

After that I went back to instance #1 and #3 and just removed the if statements that were clearly causing some shit to mess up and forcing them to not check what they were checking and just to do what they would do if the checks came back positive instead of the false negatives that they were receiving.

    foreach ($sub_directories as $sub){
                        $base .= $sub . '/';
                        $this->debug(3, "Trying file as: " . $base . $src);
                        if(file_exists($base . $src)){
                                $this->debug(3, "Found file as: " . $base . $src);
                                $real = realpath($base . $src);
                                          return $real;

                if(file_exists ($this->docRoot . '/' . $src)) {
                        $this->debug(3, "Found file as " . $this->docRoot . '/' . $src);
                        $real = realpath($this->docRoot . '/' . $src);
                        if(stripos($real, $this->docRoot) === 1){
                                return $real;
                        } else {
                                $this->debug(1, "Security block: The file specified occurs outside the document root.");

}

to this

                if(file_exists ($this->docRoot . '/' . $src)) {
                        $this->debug(3, "Found file as " . $this->docRoot . '/' . $src);
                        $real = realpath($this->docRoot . '/' . $src);
                                return $real;

 foreach ($sub_directories as $sub){
                        $base .= $sub . '/';
                        $this->debug(3, "Trying file as: " . $base . $src);
                        if(file_exists($base . $src)){
                                $this->debug(3, "Found file as: " . $base . $src);
                                $real = realpath($base . $src);
                                if(stripos($real, $this->docRoot) === 0){
                                        return $real;
                                } else {
                                        $this->debug(1, "Security block3: The file specified occurs outside the document root.");
                                        //And continue search
                                }

to this

    foreach ($sub_directories as $sub){
                        $base .= $sub . '/';
                        $this->debug(3, "Trying file as: " . $base . $src);
                        if(file_exists($base . $src)){
                                $this->debug(3, "Found file as: " . $base . $src);
                                $real = realpath($base . $src);
                                          return $real;

http://blog.netflowdevelopments.com/wp-admin/post.php?post=702&action=edit

So it all started with a fairly minor issue I noticed in WordPress.   When I would try to load up the media gallery I would be greeted with a nice 502  Nginx error.  I’m sure if I wasn’t running nginx then it would have a blank white page or an apache error.  So naturally I started with the nginx error logs which didn’t lead to much.. Then I setup php to log all errors and again that didn’t lead me to much, finally however I monitored my httpd-error.log and this lovely message turned up:

[warn] (2)No such file or directory: Cannot reinit SSLMutex
/libexec/ld-elf.so.1: /usr/local/lib/php/20060613/gd.so: Undefined symbol “zend_parse_parameters_none”

After some asking around on irc I was told that it was definitely a php problem.  Nothing more specific than that, just a php problem.  There were a bunch of forum posts saying it might have something to do with fastCGI but all the suggestions had no effect.  However there was one forum I foudn that through a suggestion out there that lit up a light bulb in my brain.  That being that if php5-extensions isn’t recompiled and reinstalled when php is updated sometimes the fit hits the shan.  Sure enough I had upgrade php5 a while back, and then again since then but hadn’t bothered to recompile the extensions.  Hell I hadn’t even recompiled Zend or Eaccelerator which is pretty standard.

So long story slightly shorter, I went in deinstalled and cleaned up my php5-extensions, reinstalled it and viola, problem solved!!

I’ve implemented the Audio Module this week to allow our Sound team to upload soundtrack, foley and effects work just the same as the 2D and 3D guys upload their work.  Unfortunately when I went to upload a 40MB .ogg file the connection to the server was reset pretty much exactly after 60 seconds.  So, easy enough I figured I’d just have to go into my php.ini file and change the max upload sizes, max connection times and all of that fun stuff.  Well I went through and changed every conceivable directive in there that had anything to do with connection times and upload sizes.  Nada!  I created .htaccess files in the /drupal dir with php_values to the same effect.. Nada!  I went to one of my wordpress blogs and tried to upload the same file and guess what?  SAme thing happened, re-assuring me that this wasn’t a drupal only problem.  So I tried increasing the Timeout value in apache, nada.  Got onto IRC on #php and no one had a clue.  Hours and hours of googling led to ZERO solutions.  It wasn’t until I decided to try this in Opera instead of Firefox that I was able to get a glimmer of understanding as to what was going on.  Just to once again re-iterate how much better of a browser Opera is than firefox, how exponentially better in every conceivable way except for compatability, Opera is compared to firefox, it took me 30 seconds to figure out and solve this problem once I had opera loading the pages.  Instead of just sending me a nebulous Server Connection Reset error after 60 seconds like FF did, Opera immediately spat out a 413 Error ‘Entity too large’.  Why Firefox didn’t touch on client_max_body_size 300M;

this at all, ever is beyond me but it was a simple matter of going into  my nginx.conf file and “setting client_max_body_size” to 300M and the problem was solved.

Sooo, if you are experiencing a Connection reset error while trying to upload files and you just happen to be running Nginx go and check out your nginx.conf file and make sure client_max_body_size is set nice and high.

No package ‘x11-xcb’ found

You need to do a few things.

Firstly upgrade X11: portupgrade libX11. This has been noted to solve a lot of problems so do this first, retry and see if it fixes it.

This however might fail in which case you are going to need to upgrade xproto first as X11 will look for a later version of Xproto than might already be on the server. doing a simple portupgrade might not work so:
So cd /usr/ports/x11/xproto & make clean & make deinstall & make reinstall

now you should be able to go into /usr/ports/x11/libX11 and:
make clean & make deinstall & make reinstall

and now finally LibGL will install properly and consequentially so will FFMPEG

So after running into this problem suddently and for no ‘apparent’ reason(although it became apparent later) I noticed the complete lack of real support docs online in regards to the ALSA underrun problem.  Hopefully I can rememdy this a little bit and help some people out.

Last week I noticed skype audio was getting really choppy, it was the equivalent of seeing the conversation through a strobe light.  Odd I thought but didn’t pay it too much heed, that was until the end of the week when the audio simply stopped all together and skype refused to close down normally.  I would have to manually kill the process in terminal after the sound cut out.  This problem was exclusive to skype, which made it even more frustrating as I could have youtube and/or music playing in exaile while skype was screwing the pooch.

It occured to me today that something indeed had been changed recently right before this problem started and that was me fiddling with pulse’s daemon.conf and enabling real-time scheduling.  I can’t remember what for but this was part of the problem.  In fact there is even a mention in pulseaudio’s man page in regards to the possibility of real-time scheduling causing problems which I’ll quote here:

Alternatively,  if the risk of locking up the machine is considered too
big to enable real-time scheduling,  high-priority  scheduling  can  be
enabled  instead  (i.e.  negative  nice  level). This can be enabled by
passing –high-priority (see above) when starting  PulseAudio  and  may
also  be  enabled  with  the approriate option in daemon.conf. Negative
nice levels can only be enabled when  the  appropriate  resource  limit

RLIMIT_NICE  is  set  (see setrlimit(2) for more information), possibly
configured in /etc/security/limits.conf. A resource limit of 31 (corre‐
sponding with nice level -11) is recommended.

At this point I got a little excited as the solution seemed within reach.  I hashed out real-time schedule and implemented high-priority scheduling, restarted pulseaudio and loaded up skype.  It started fine but when I made a test call I was once again plagued by ALSA underruns.

They key here was to adjust the nice level.  I incrementally went down from -11 all the way to 3 (as in plus 3 not -3), restarted pulseaudio, loaded skype and viola!  Problem solved.  The nice level might be different for you so maybe experiment with that a little bit.

Summary:

• edit ~/.pulse/daemon.conf (or /etc/pulse/daemon.conf if you run as system)
• Hash out realtime-scheduling and realtime-priority
• Unhash high-priority and nice-level
• set nice level to 3 (not -3 or -11 for that matter)

Update:  Bah, I am still seeing these under runs.  The severity of them has gone down as skype doesn’t completely cut out now and lock up but I am getting audio cutting in and out every 2-3 seconds when making a call via skypeout.

Searching around the skype forums I found this and this actually seems to have done the trick completely:

Edit your ~/.asoundrc file

# Part I directly from ALSA Dmix Wiki

pcm.skype {
type dmix
ipc_key 1024
slave {
pcm “hw:0,0″
period_time 0
period_size 1024
buffer_size 8192
#format “S32_LE”
#periods 128
rate 44100
}
}

pcm.dsp0 {
type plug
slave.pcm “skype”
}

# This following device can fool some applications into using pulseaudio
pcm.dsp1 {
type plug
slave.pcm “pulse”
}

ctl.mixer0 {
type hw
card 0
}

pcm.pulse { type pulse }
ctl.pulse { type pulse }
pcm.!default {
type pulse
}

ctl.!default {
type pulse
}