php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #38688 segmentation fault when using mm
Submitted: 2006-09-02 04:34 UTC Modified: 2006-09-12 01:00 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: alan+php at mizrahi dot com dot ve Assigned:
Status: No Feedback Package: Reproducible crash
PHP Version: 5.1.6 OS: Linux
Private report: No CVE-ID: None
 [2006-09-02 04:34 UTC] alan+php at mizrahi dot com dot ve
Description:
------------
PHP segfaults sporadically when built with mm.
I am using apache-2.2.3, php-5.1.6 and libmm-1.4.0.

Actual result:
--------------
This is what gdb shows:

Core was generated by `/usr/sbin/httpd -k start'.
Program terminated with signal 11, Segmentation fault.
#0  zm_shutdown_ps_mm (type=1, module_number=20)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/ext/session/mod_mm.c:243
243     /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/ext/session/mod_mm.c: 
No such file or directory.
        
in /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/ext/session/mod_mm.c
(gdb) bt
#0  zm_shutdown_ps_mm (type=1, module_number=20)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/ext/session/mod_mm.c:243
#1  0xb73e0dab in zm_shutdown_session (type=512, 
module_number=20)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/ext/session/session.c:1869
#2  0xb7570b6e in module_destructor (module=0x81a2388)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/Zend/zend_API.c:1811
#3  0xb75787a7 in zend_hash_apply_deleter (ht=0xb7929a00, 
p=0x81a2358)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/Zend/zend_hash.c:576
#4  0xb75789b7 in zend_hash_graceful_reverse_destroy 
(ht=0xb7929a00)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/Zend/zend_hash.c:642
#5  0xb756d4ae in zend_shutdown ()
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/Zend/zend.c:728
#6  0xb752a71f in php_module_shutdown ()
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/main/main.c:1618
#7  0xb752a7bb in php_module_shutdown_wrapper 
(sapi_globals=0xb7909900)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/main/main.c:1589
#8  0xb7611013 in php_apache_server_shutdown (tmp=0x0)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.5/sapi/apache2handler/sapi_apache2.c:332
#9  0xb7b2e16d in run_cleanups (cref=0x809e0b8) at 
memory/unix/apr_pools.c:2034
#10 0xb7b2ecdd in apr_pool_destroy (pool=0x809e0a8) at 
memory/unix/apr_pools.c:727
#11 0xb7b2ecc8 in apr_pool_destroy (pool=0x809c0a0) at 
memory/unix/apr_pools.c:724
#12 0x08061493 in destroy_and_exit_process (process=<value 
optimized out>,
    process_exit_value=-1796453902) at main.c:259
#13 0x080621a8 in main (argc=3, argv=0xbf837e94) at 
main.c:724


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-09-02 04:37 UTC] alan+php at mizrahi dot com dot ve
Sorry, thats a backtrace for php-5.1.5. The actual 
backtrace (5.1.6) shows this:

Program terminated with signal 11, Segmentation fault.
#0  zm_shutdown_ps_mm (type=1, module_number=20)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/ext/session/mod_mm.c:243
243                             next = sd->next;
(gdb) bt
#0  zm_shutdown_ps_mm (type=1, module_number=20)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/ext/session/mod_mm.c:243
#1  0xb73d4dcb in zm_shutdown_session (type=31780, 
module_number=20)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/ext/session/session.c:1869
#2  0xb7564c0e in module_destructor (module=0x81a2380)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/Zend/zend_API.c:1811
#3  0xb756c817 in zend_hash_apply_deleter (ht=0xb791db80, 
p=0x81a2350)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/Zend/zend_hash.c:576
#4  0xb756ca27 in zend_hash_graceful_reverse_destroy 
(ht=0xb791db80)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/Zend/zend_hash.c:642
#5  0xb756154e in zend_shutdown ()
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/Zend/zend.c:728
#6  0xb751e73f in php_module_shutdown ()
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/main/main.c:1618
#7  0xb751e7db in php_module_shutdown_wrapper 
(sapi_globals=0xb78fda80)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/main/main.c:1589
#8  0xb7605183 in php_apache_server_shutdown (tmp=0x0)
    
at /usr/ports/work/mod_php_complete_debug/src/php-5.1.6/sapi/apache2handler/sapi_apache2.c:332
#9  0xb7b2216d in run_cleanups (cref=0x809e0b8) at 
memory/unix/apr_pools.c:2034
#10 0xb7b22cdd in apr_pool_destroy (pool=0x809e0a8) at 
memory/unix/apr_pools.c:727
#11 0xb7b22cc8 in apr_pool_destroy (pool=0x809c0a0) at 
memory/unix/apr_pools.c:724
#12 0x08061493 in destroy_and_exit_process (process=<value 
optimized out>,
    process_exit_value=1685221224) at main.c:259
#13 0x080621a8 in main (argc=3, argv=0xbfe2c254) at 
main.c:724
 [2006-09-04 20:22 UTC] tony2001@php.net
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.


 [2006-09-12 01:00 UTC] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Mon Jul 07 12:01:35 2025 UTC