When I try and select a TIMESTAMP column from SQL Server, php core dumps.   I am using PHP 4.0.4pl1, with FreeTDS 0.51 and SQL Server 7.0 SP1 on kernel 2.2.16, glibc-2.2

Something as simple as:
SELECT dateJoined FROM members;

will cause a core dump

The bad line in add_string_to_string is :
memcpy(result->value.str.val+op1->value.str.len, op2->value.str.val, op2->value.str.len);

GDB values:
(gdb) print result->value.str.val+op1->value.str.len
$1 = 0x81d3be2 ""
(gdb) print op2->value.str.val
$2 = 0x81d08e4 ""
(gdb) print  op2->value.str.len
$3 = -1

(gdb) bt
#0  0x40791ace in memcpy () from /lib/libc.so.6
#1  0x80eda9e in add_string_to_string (result=0xbfffdaa0, op1=0xbfffdaa0, op2=0x81c6c2c)
    at zend_operators.c:1004
#2  0x8125efe in execute (op_array=0x81c69b4) at ./zend_execute.c:1389
#3  0x812679a in execute (op_array=0x81b7d6c) at ./zend_execute.c:1559
#4  0x80f0ef8 in zend_execute_scripts (type=8, file_count=3) at zend.c:729
#5  0x8061b18 in php_execute_script (primary_file=0xbffff6b0) at main.c:1221
#6  0x805fcf8 in main (argc=2, argv=0xbffff764) at cgi_main.c:738
#7  0x40727f31 in __libc_start_main (main=0x805f434 <main>, argc=2, ubp_av=0xbffff764, 
    init=0x805d784 <_init>, fini=0x81309dc <_fini>, rtld_fini=0x4000e274 <_dl_fini>, 
    stack_end=0xbffff75c) at ../sysdeps/generic/libc-start.c:129