That's rather vague, so here is a vague guess. Perhaps if you alarm(20) and then don't take 20 seconds to handle that web request, then some subsequent web request will get an unexpected SIGALRM. You should probably be sure to alarm(0) when you finish a request and you may want to alarm(0) when you start a new request.