php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #34610 libxml segfault
Submitted: 2005-09-23 11:53 UTC Modified: 2005-10-01 01:00 UTC
From: don dot schulzo at gmail dot com Assigned:
Status: No Feedback Package: Reproducible crash
PHP Version: 5CVS-2005-09-23 (snap) OS: linux
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: don dot schulzo at gmail dot com
New email:
PHP Version: OS:

 

 [2005-09-23 11:53 UTC] don dot schulzo at gmail dot com 
Description:
------------
libxml segfaults but i was unable to locate the "bad" piece of code, here's the backtrace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 20114)]
php_libxml_node_free_list (node=0x83a812c)
    at /root/src/php5-200509220630/ext/libxml/libxml.c:207
207                             switch (node->type) {
(gdb) bt
#0  php_libxml_node_free_list (node=0x83a812c)
    at /root/src/php5-200509220630/ext/libxml/libxml.c:207
#1  0xb77bc6c9 in php_libxml_node_free_list (node=0x83a812c)
    at /root/src/php5-200509220630/ext/libxml/libxml.c:223
#2  0xb77bc74d in php_libxml_node_free_resource (node=0x83e9d40)
    at /root/src/php5-200509220630/ext/libxml/libxml.c:936
#3  0xb77bc7ef in php_libxml_node_decrement_resource (object=0x83a5904)
    at /root/src/php5-200509220630/ext/libxml/libxml.c:970
#4  0xb77d5188 in dom_objects_free_storage (object=0x83a5904)
    at /root/src/php5-200509220630/ext/dom/php_dom.c:902
#5  0xb78e37fc in zend_objects_store_del_ref (zobject=0xb77d5110)
    at /root/src/php5-200509220630/Zend/zend_objects_API.c:161
#6  0xb78bf66f in _zval_ptr_dtor (zval_ptr=0x83a5a58) at zend_variables.h:35
#7  0xb78d4ab8 in zend_hash_destroy (ht=0x83a4ccc)
    at /root/src/php5-200509220630/Zend/zend_hash.c:519
#8  0xb78e0c35 in zend_objects_free_object_storage (object=0x83e5d04)
    at /root/src/php5-200509220630/Zend/zend_objects.c:91
#9  0xb78e37fc in zend_objects_store_del_ref (zobject=0xb78e0c20)
    at /root/src/php5-200509220630/Zend/zend_objects_API.c:161
#10 0xb78bf66f in _zval_ptr_dtor (zval_ptr=0x83e9d98) at zend_variables.h:35
#11 0xb78d4ab8 in zend_hash_destroy (ht=0x82fb7f4)
    at /root/src/php5-200509220630/Zend/zend_hash.c:519
#12 0xb78e0c35 in zend_objects_free_object_storage (object=0x82f5a3c)
    at /root/src/php5-200509220630/Zend/zend_objects.c:91
#13 0xb78e37fc in zend_objects_store_del_ref (zobject=0xb78e0c20)
    at /root/src/php5-200509220630/Zend/zend_objects_API.c:161
#14 0xb78bf66f in _zval_ptr_dtor (zval_ptr=0x82fb028) at zend_variables.h:35
#15 0xb78d4ab8 in zend_hash_destroy (ht=0x82fb82c)
    at /root/src/php5-200509220630/Zend/zend_hash.c:519
---Type <return> to continue, or q <return> to quit---
#16 0xb78cabd9 in _zval_dtor_func (zvalue=0x82f963c)
    at /root/src/php5-200509220630/Zend/zend_variables.c:43
#17 0xb78bf66f in _zval_ptr_dtor (zval_ptr=0x82f5938) at zend_variables.h:35
#18 0xb78d4ab8 in zend_hash_destroy (ht=0x835f64c)
    at /root/src/php5-200509220630/Zend/zend_hash.c:519
#19 0xb77d5125 in dom_objects_free_storage (object=0x82ed08c)
    at /root/src/php5-200509220630/ext/dom/php_dom.c:897
#20 0xb78e3679 in zend_objects_store_free_object_storage (objects=0xb7a09b3c)
    at /root/src/php5-200509220630/Zend/zend_objects_API.c:82
#21 0xb78bfe79 in shutdown_executor ()
    at /root/src/php5-200509220630/Zend/zend_execute_API.c:272
#22 0xb78cbeef in zend_deactivate ()
    at /root/src/php5-200509220630/Zend/zend.c:832
#23 0xb78909e5 in php_request_shutdown (dummy=0x0)
    at /root/src/php5-200509220630/main/main.c:1241
#24 0xb795ce24 in php_handler (r=0x8275f50)
    at /root/src/php5-200509220630/sapi/apache2handler/sapi_apache2.c:443
#25 0x08068aa5 in ap_run_handler ()
#26 0x08068f1c in ap_invoke_handler ()
#27 0x08065ce8 in ap_process_request ()
#28 0x08060ec8 in _start ()
#29 0x08275f50 in ?? ()
#30 0x00000004 in ?? ()
#31 0x08275f50 in ?? ()
#32 0x08072bbc in ap_run_pre_connection ()
#33 0x08072a75 in ap_run_process_connection ()
#34 0x08066c6b in ap_graceful_stop_signalled ()
#35 0x08066e69 in ap_graceful_stop_signalled ()
#36 0x08066f70 in ap_graceful_stop_signalled ()
---Type <return> to continue, or q <return> to quit---~
#37 0x080677ad in ap_mpm_run ()
#38 0x0806e090 in main ()

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2005-09-23 11:56 UTC] tony2001@php.net 
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc.

If possible, make the script source available online and provide
an URL to it here. Try to avoid embedding huge scripts into the report.
 [2005-10-01 01:00 UTC] php-bugs at lists dot php dot net 
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Sun Apr 05 23:00:01 2026 UTC