Uploads greater than 64 kilobytes corrupted when using Apache mod_fcgid

Actually, as it turns out, it's more an Apache problem than a PHP problem. I tried to downgrade PHP, but it turns out that it won't work. Instead, I brought PHP to Lucid's level, but installed Apache from Karmic, and that solved the problem. At this point, I suspect that I might have a buggered config, or there may be a bug in Apache that needs addressing.

I'm having the same problem here with SquirrelMail. The update to lucid buggerd the uploads.

I tried downgrading Apache2 to:

ii apache2 2.2.12-1ubuntu2.2 Apache HTTP Server metapackage
ii apache2-mpm-worker 2.2.12-1ubuntu2.2 Apache HTTP Server - high speed threaded mod
ii apache2-threaded-dev 2.2.12-1ubuntu2.2 Apache development headers - threaded MPM
ii apache2-utils 2.2.12-1ubuntu2.2 utility programs for webservers
ii apache2.2-bin 2.2.12-1ubuntu2.2 Apache HTTP Server common binary files
ii apache2.2-common 2.2.12-1ubuntu2.2 Apache HTTP Server common files

but that wouldn't help.

I found the culprit!

I downgrade apache2 (see above), to no avail
I downgrade php5 and all module (a lot of work), to no avail

I downgraded libapache2-mod-fcgid from 1:2.3.4-2 to 1:2.2-1 and it would work again!

Sorry for asking, but I tried downgrading in Ubuntu Lucid 10.04 LTS and I'm getting a message which says "E: Version '1:2.2-1' for 'libapache2-mod-fcgid' was not found":

webappz@drupal:~$ sudo apt-get install libapache2-mod-fcgid=1:2.2-1
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Version '1:2.2-1' for 'libapache2-mod-fcgid' was not found

Ps: I did try removing it first too, but made no difference.
webappz@drupal:~$ sudo apt-get remove libapache2-mod-fcgid

I thought that was the way for installing a specific version, am I doing it wrong?

Posted detailed instructions for downgrading on my blog at http://www.socinfo.com/ubuntu/php/fcgid/bug-fix-corrupt-files-upload

Short Summary here:

    * First, download a trusted version of libapache2-mod-fcgid to 1:2.2-1 from http://packages.ubuntu.com/karmic/libapache2-mod-fcgid . In my case, running Ubuntu 64bit being in Singapore now, the closest mirror was Korea, so I did:

      wget http://kr.archive.ubuntu.com/ubuntu/pool/universe/liba/libapache2-mod-fcgid/libapache2-mod-fcgid_2.2-1_amd64.deb

    * Then install it with:

      sudo dpkg -i libapache2-mod-fcgid_2.2-1_amd64.deb

    * Finally, you need to "hold" this version so that it is not upgraded later on any maintenance process or update you do:

      sudo -s
      echo libapache2-mod-fcgid hold | dpkg --set-selections

That's it. You can reload Apache and restart Apache:

sudo etc/init.d/apache2 reload
sudo apache2ctl graceful

You can see the actual version of libapache2-mod-fcgid installed by typing:

sudo dpkg -s libapache2-mod-fcgid

And you can test that it remains even do an upgrade and then test if the version remains. You will see a notice when doing the upgrade that this package will be ignored.

sudo apt-get update
sudo apt-get upgrade
sudo dpkg -s libapache2-mod-fcgid

If you have downgraded PHP or Apache please install the most up-to-date version again.
This is a bug in mod_fcgid.

I uploaded a package to my PPA that contains a backport of the upstream fix:
https://launchpad.net/~debfx/+archive/ppa/+sourcepub/1134919/+listing-archive-extra

Please test the package by downloading libapache2-mod-fcgid_2.3.4-2ubuntu1_i386.deb or libapache2-mod-fcgid_2.3.4-2ubuntu1_amd64.deb depending on your architecture (run "dpkg-architecture -qDEB_HOST_ARCH" if you are unsure).

After downloading you can install the packages by running:
sudo dpkg -i <filename>

A belated update, once I noticed the messages saying that it's a mod_fcgid bug, I went ahead and upgraded everything but that, keeping mod_fcgid at Karmic's level. Machine's purring along now and no complaints. There are unrelated issues, but this particular problem is solved until the Debian fix finds its way into the Ubuntu .debs.

Does it still work when you upgrade from the karmic package to the testing package I posted?

I just built the new version of that package. It works perfectly. To be safe, I ran MD5s on an FTP-uploaded copy versus the HTTP/PHP5-uploaded copy of the file. They match perfectly.

I marked this as Fix Released because version 2.3.5 is in maverick and nominated it for Lucid.

File uploads work for me too with this patch so I'm requesting a SRU:

libapache2-mod-fcgid (1:2.3.4-2ubuntu0.1) lucid-proposed; urgency=low

  * Add 30_fix-request-body-truncation.dpatch to fix corruption of requests
    that exceed the FcgidMaxRequestInMem size. (LP: #573591)

 -- Felix Geyer <email address hidden> Sun, 16 May 2010 13:07:54 +0200

Attaching a new testcase that doesn't need suexec.

Uploaded to the lucid-proposed queue; awaiting ubuntu-sru approval.

Accepted libapache2-mod-fcgid into lucid-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

I just upgraded libapache2-mod-fcgid from lucid-proposed and file upload seems to be ok, I don't have uploaded images corrupted anymore.

This bug was fixed in the package libapache2-mod-fcgid - 1:2.3.4-2ubuntu0.1

---------------
libapache2-mod-fcgid (1:2.3.4-2ubuntu0.1) lucid-proposed; urgency=low

  * Add 30_fix-request-body-truncation.dpatch to fix corruption of requests
    that exceed the FcgidMaxRequestInMem size. (LP: #573591)
 -- Felix Geyer <email address hidden> Sun, 16 May 2010 13:07:54 +0200