php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #3224 Crash on complex PHPLIB script - every time session data is read
Submitted: 2000-01-16 13:17 UTC Modified: 2000-01-20 09:15 UTC
From: stas at zend dot com Assigned:
Status: Closed Package: Reproducible Crash
PHP Version: 4.0 Latest CVS (16/01/2000) OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: stas at zend dot com
New email:
PHP Version: OS:

 

 [2000-01-16 13:17 UTC] stas at zend dot com 
Program received signal SIGSEGV, Segmentation fault.
0x80ad148 in php_register_var (entry=0x81cb308)
    at /home/php/php4/ext/session/session.c:957
957		} else if (!PG(track_vars) || strcmp((*entry)->value.str.val, "HTTP_STATE_VARS") != 0) {
#0  0x80ad148 in php_register_var (entry=0x81cb308)
    at /home/php/php4/ext/session/session.c:957
#1  0x80ad36a in php_if_session_register (ht=1, return_value=0x8318768, 
    list=0x818b4dc, plist=0x818b50c, this_ptr=0x0, return_value_used=0)
    at /home/php/php4/ext/session/session.c:993
#2  0x80e4965 in execute (op_array=0x81e6b10) at ../../Zend/zend_execute.c:1525
#3  0x80e4b57 in execute (op_array=0x81e4340) at ../../Zend/zend_execute.c:1564
#4  0x80e4b57 in execute (op_array=0x830c1c8) at ../../Zend/zend_execute.c:1564
#5  0x80e4b57 in execute (op_array=0x81cb5c8) at ../../Zend/zend_execute.c:1564
#6  0x8084f90 in php_execute_script (primary_file=0xbffffb5c)
    at /home/php/php4/./main.c:1302
#7  0x809d0a1 in apache_php_module_main (r=0x81c7b94, fd=19, 
    display_source_mode=0) at /home/php/php4/sapi/apache/sapi_apache.c:86
#8  0x8083413 in send_php ()
#9  0x8083458 in send_parsed_php ()
#10 0x80eeb53 in ap_invoke_handler ()
#11 0x8101e49 in process_request_internal ()
#12 0x8101eac in ap_process_request ()
#13 0x80f986e in child_main ()
#14 0x80f99fc in make_child ()
#15 0x80f9b59 in startup_children ()
#16 0x80fa186 in standalone_main ()
#17 0x80fa903 in main ()
(gdb) p (*entry)->value    
$2 = {lval = 1, dval = 1.7838863871792182e+127, str = {
    val = 0x1 <Address 0x1 out of bounds>, len = 1515870810}, 
  chval = 1 '\001', ht = 0x1, obj = {ce = 0x1, properties = 0x5a5a5a5a}}

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-01-17 12:36 UTC] stas at zend dot com 
tracked it down to much shorter script:
<? session_register(1) ?>

produces segfault.
 [2000-01-20 09:13 UTC] stas at zend dot com 
seems to be fixed now
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Wed Oct 14 18:00:02 2026 UTC