PHP :: Bug #75654 :: PHP Crash Using PDO ODBC

Bug #75654	PHP Crash Using PDO ODBC
Submitted:	2017-12-08 17:06 UTC	Modified:	2018-05-05 21:50 UTC
From:	conner dot panarella at teamson dot com	Assigned:
Status:	No Feedback	Package:	Reproducible crash
PHP Version:	7.2.0	OS:	Windows Server 2012
Private report:	No	CVE-ID:	None

View Developer Edit

Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.

php.net Username: php.net Password:

Quick Fix:	(description)
	Block user comment
Status:		Assign to:
Package:
Bug Type:
Summary:
From:	conner dot panarella at teamson dot com
New email:
PHP Version:		OS:

New/Additional Comment:

[2017-12-08 17:06 UTC] conner dot panarella at teamson dot com

Description:
------------
If I made more than 1 request to the odbc database source using PDO, PHP crashes with the following backtrace:

Actual result:
--------------
Full Call Stack



Function     Arg 1     Arg 2     Arg 3     Arg 4   Source 
ntdll!RtlReportCriticalFailure+8c     20202020`0000e400     00007fff`9bf4ed40     000000d6`c9eb0000     006e006f`00000000    
ntdll!RtlpHeapHandleError+12     000000d6`c9eb0000     00000000`00000000     00000000`00000000     20202020`20202000    
ntdll!RtlpLogHeapFailure+a4     000000d6`c9eb0000     000000d6`c9eb43b0     00000000`00000000     00000000`00000007    
ntdll!RtlpAllocateHeap+1b22     000000d6`c9eb0000     002e0032`00000002     00000000`00001220     00000000`00001230    
ntdll!RtlAllocateHeap+17d     00000000`00740072     000000d6`00000003     00000000`00000ac2     00000000`00000000    
ntdll!RtlCreateProcessParametersEx+21c     000000d6`c9d78db0     000000d6`c9d79130     00000000`00000000     00000104`00000072    
KERNELBASE!BasepCreateProcessParameters+189     00000000`00000008     00000000`00000001     00000000`00000000     00000000`00000208    
KERNELBASE!CreateProcessInternalW+a4a     00000000`00000000     00000000`0000022c     00000000`00000026     00007fff`67c648eb    
KERNELBASE!CreateProcessW+66     00000000`00000000     00000000`00000000     00000000`00000360     00007fff`67c88ce8    
kernel32!CreateProcessWStub+53     000070b9`fd335aaf     00790070`006f0044     00000000`00000000     00000000`00000013    
mscorwks!WszCreateProcess+10a     00000000`00000000     00000000`00000334     00720061`00560000     00007fff`67b33628    
mscorwks!RunWatson+162     00000000`00000004     000000d6`cbc404d0     000000d6`88500000     00000000`00000364    
mscorwks!DoFaultReportWorker+79c     000000d6`c9d7a898     00000000`00000004     00000000`00000000     00000000`0000022c    
mscorwks!DoFaultReport+9f     00000000`00000000     00007fff`6800e930     00000104`00001000     00000000`00020000    
mscorwks!WatsonLastChance+47     00000000`00000000     000000d6`c5d70000     00007fff`00000004     00007fff`67c5069a    
mscorwks!UnmanagedToManagedCallFrame::ExceptionUnwind+25b     000000d6`c9d7ab80     00000000`00000001     00000020`00001000     00000000`01000000    
mscorwks!InternalUnhandledExceptionFilter+29     00000000`00000000     00000000`00000001     00000000`00000000     00000000`00000001    
KERNELBASE!UnhandledExceptionFilter+1a2     00000000`00000000     00007fff`99101dc0     00000000`00000000     000000d6`c9d7fa30    
ntdll!RtlUserThreadStart$filt$0+3e     00007fff`9bf4eb20     00007fff`9be75e95     ffffffff`00000000     00000000`b12de70d    
ntdll!_C_specific_handler+96     00000000`00000000     000000d6`c9d7acf0     000000d6`c9d7b7b0     000000d6`c9d7b7b0    
ntdll!RtlpExecuteHandlerForException+d     00000000`00000001     00007fff`9be20000     00000000`00000000     00007fff`9bf5409c    
ntdll!RtlDispatchException+197     00000000`00000000     00000000`00000000     000000d6`cbd7219c     00000000`00000000    
ntdll!KiUserExceptionDispatch+3a     00007fff`7203fb58     00000000`00000001     00007fff`720393cf     000000d6`cbbf1001    
msvcr120!strncpy+121     00000000`00000001     00007fff`720393cf     000000d6`cbbf1001     00000000`ffffffff   f:\dd\vctools\crt\crtw32\string\amd64\strncpy.asm @ 138 
S23DBC32!SQLFreeStmt+2138     000000d6`cbd06050     000000d6`c9d7bcd0     00000000`00000001     00000000`00000009    
S23DBC32!SQLError+10ec     00000000`00000001     000000d6`cbd06050     00000000`00000000     00007fff`99e11d76    
S23DBC32!SQLExecute+1ac     80000000`00000000     00007fff`72044680     00000000`00000002     000000d6`c9eaddd0    
odbc32!SQLExecute+37e     000000d6`cb86fca8     00007fff`00000000     80000000`00000000     00000000`00000000    
php_pdo_odbc!odbc_stmt_execute+39     00000000`00000000     80000000`00000000     000000d6`cb8a6700     00000000`00000000   c:\php-snap-build\php72\vc15\x64\php-7.2.0\ext\pdo_odbc\odbc_stmt.c @ 173 + e 
php7!zim_PDOStatement_execute+1fb     00000000`00000000     80000000`00000000     000000d6`cb893a60     000000d6`cb868fa8   c:\php-snap-build\php72\vc15\x64\php-7.2.0\ext\pdo\pdo_stmt.c @ 503 + 5 
php7!ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER+14a     000000d6`cb8a9850     00007fff`723cf7f0     000000d6`cb893a60     000000d6`cb81d0c0   c:\php-snap-build\php72\vc15\x64\php-7.2.0\zend\zend_vm_execute.h @ 921 
php7!execute_ex+80     00007fff`723d8bb0     00000000`00000000     000000d6`cb87d2a0     00000000`00000008   c:\php-snap-build\php72\vc15\x64\php-7.2.0\zend\zend_vm_execute.h @ 59726 + 5 
php7!zend_execute+140     000000d6`cb865360     000000d6`c9d7ed70     00000000`00000001     00000000`00000008   c:\php-snap-build\php72\vc15\x64\php-7.2.0\zend\zend_vm_execute.h @ 63764 
php7!zend_execute_scripts+a9     00000000`00000008     00000000`00000000     ffffffff`00000000     00000000`00000000   c:\php-snap-build\php72\vc15\x64\php-7.2.0\zend\zend.c @ 1497 
php7!php_execute_script+33b     00000000`00000001     00000000`00000001     80000000`00000000     000000d6`cbb46ff8   c:\php-snap-build\php72\vc15\x64\php-7.2.0\main\main.c @ 2592 + 1b 
php!do_cli+a1f     00000000`00000008     000000d6`c9d7f930     00000000`00000008     000000d6`c9d7f930   c:\php-snap-build\php72\vc15\x64\php-7.2.0\sapi\cli\php_cli.c @ 1012 
php!main+65e     00007ff6`ce93b000     00000000`00000000     00007fff`737d59f4     00007ff6`ce47e000   c:\php-snap-build\php72\vc15\x64\php-7.2.0\sapi\cli\php_cli.c @ 1404 + 11 
php!__scrt_common_main_seh+11d     00007ff6`ce93b090     00007ff6`ce47e000     00000000`00000000     00000000`00000000   f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl @ 283 + 22 
kernel32!BaseThreadInitThunk+22     00007fff`99f213b0     00000000`00000000     00000000`00000000     00000000`00000000    
ntdll!RtlUserThreadStart+34     00000000`00000000     00000000`00000000     00000000`00000000     00000000`00000000

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

[2017-12-13 03:23 UTC] kalle@php.net

-Status: Open +Status: Feedback

[2017-12-13 03:23 UTC] kalle@php.net

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.

[2018-05-05 21:50 UTC] requinix@php.net

-Status: Feedback +Status: No Feedback

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2025 The PHP Group All rights reserved.	Last updated: Tue Nov 04 05:00:01 2025 UTC