php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #48405 Segmentation fault while type casting array into object
Submitted: 2009-05-27 11:00 UTC Modified: 2009-06-04 01:00 UTC
From: dharmeshm at rediff dot co dot in Assigned:
Status: No Feedback Package: Arrays related
PHP Version: 5.2.6 OS: CentOS release 3.8 (Final)
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: dharmeshm at rediff dot co dot in
New email:
PHP Version: OS:

 

 [2009-05-27 11:00 UTC] dharmeshm at rediff dot co dot in 
Description:
------------
While converting array into object, it gives segmentation fault.
php version 5.2.6
GDB backtrace result:

(gdb) run /home/httpd/html/wordpress/test.php
Starting program: /usr/local/bin/php /home/httpd/html/wordpress/test.php
[Thread debugging using libthread_db enabled]
[New Thread -1218523008 (LWP 30017)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1218523008 (LWP 30017)]
_zend_mm_free_int (heap=0x8b656b0, p=0x8b656b0) at /usr/local/src/php-5.2.6/Zend/zend_alloc.c:1960
1960            if (ZEND_MM_IS_FREE_BLOCK(next_block)) {
(gdb) bt
#0  _zend_mm_free_int (heap=0x8b656b0, p=0x8b656b0) at /usr/local/src/php-5.2.6/Zend/zend_alloc.c:1960
#1  0x08290865 in _efree (ptr=0xbfff5930) at /usr/local/src/php-5.2.6/Zend/zend_alloc.c:2293
#2  0x0830b47a in zend_assign_to_variable (result=0xb75b7280, op1=0xb75b773c, op2=0xb75b72e0, value=0xbfff5930, type=2, Ts=0xbfff58e0, tsrm_ls=0x8b64280)
    at /usr/local/src/php-5.2.6/Zend/zend_execute.c:764
#3  0x082f703c in ZEND_ASSIGN_DIM_SPEC_CV_CONST_HANDLER (execute_data=0xbfff5970, tsrm_ls=0x8b64280) at /usr/local/src/php-5.2.6/Zend/zend_vm_execute.h:21437
#4  0x082c07c2 in execute (op_array=0xb75b6f20, tsrm_ls=0x8b64280) at /usr/local/src/php-5.2.6/Zend/zend_vm_execute.h:92
#5  0x082a7a4e in zend_execute_scripts (type=8, tsrm_ls=0x8b64280, retval=0x0, file_count=3) at /usr/local/src/php-5.2.6/Zend/zend.c:1134
#6  0x0826e4ed in php_execute_script (primary_file=0xbfff7d10, tsrm_ls=0x8b64280) at /usr/local/src/php-5.2.6/main/main.c:2005
#7  0x0830d0c2 in main (argc=2, argv=0xbfff7df4) at /usr/local/src/php-5.2.6/sapi/cli/php_cli.c:1140
(gdb) frame 2
#2  0x0830b47a in zend_assign_to_variable (result=0xb75b7280, op1=0xb75b773c, op2=0xb75b72e0, value=0xbfff5930, type=2, Ts=0xbfff58e0, tsrm_ls=0x8b64280)
    at /usr/local/src/php-5.2.6/Zend/zend_execute.c:764
764                                     zval_ptr_dtor(&value);

Reproduce code:
---------------
$wp_taxonomies['category'] = (object) array('name' => 'category', 'object_type' => 'post', 'hierarchical' => true, 'update_count_callback' => '_update_post_term_count');

Actual result:
--------------
segmentation fault

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-05-27 12:54 UTC] jani@php.net 
Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/
 [2009-06-04 01:00 UTC] php-bugs at lists dot php dot net 
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Sat Dec 21 14:01:32 2024 UTC