php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #32929 php crashing on array element assignment
Submitted: 2005-05-03 19:51 UTC Modified: 2005-05-04 09:56 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:1 (100.0%)
From: majoros at inma dot ucl dot ac dot be Assigned:
Status: Closed Package: Reproducible crash
PHP Version: 4.3.11 OS: fc3
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: majoros at inma dot ucl dot ac dot be
New email:
PHP Version: OS:

 

 [2005-05-03 19:51 UTC] majoros at inma dot ucl dot ac dot be 
Description:
------------
PHP is crashing on some page (segfault), at least on two servers. It crashes when I try to create a new array element (see code), not always, but always in the same conditions.

Same with 4.3.10, 4.3.11 and latest cvs. 

configure:

'./configure' '--with-apxs2' '--with-iconv' 

Reproduce code:
---------------
 while ($res=$result->fetchRow(DB_FETCHMODE_ASSOC))
 {
  // TODO: make iconv optional
  foreach ($res as $key=>$val)
   $res[$key]=iconv("ISO-8859-1","UTF-8",$val);
////// CRASHING ON FOLLOWING LINE AFTER 5 ITERATIONS (DATA DEPENDANT)
  $wikireq[$id][]=$res;
 }

Expected result:
----------------
should not crash!

Actual result:
--------------
crash boom, this line in apache error.log:

[Tue May 03 19:33:21 2005] [notice] child pid 10313 exit signal Segmentation fault (11)

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2005-05-03 22:50 UTC] iliaa@php.net 
What is the value of $val variable.
 [2005-05-04 00:11 UTC] majoros at inma dot ucl dot ac dot be 
$val is some value extracted from a database. The foreach loop goes through every column of the data extracted from the current row ($res). 

Here are the values contained in $res when the crash occurs (on 5th iteration in 'while'):
"mvanhXXX","Marie-Anne Van HXXX",1,1,1,1,0 

I had to replace some name with XXX for privacy, but it doesn't contain any special character. BTW, the same happens if i just leave the iconv. If I replace the "bad" line with this:

$wikireq[$id][]=''; 

The crash doesn't occur (but I don't get my data).
 [2005-05-04 00:28 UTC] majoros at inma dot ucl dot ac dot be 
You can even forget about the foreach loop, and thus var: same problem if I remove them...
 [2005-05-04 09:55 UTC] majoros at inma dot ucl dot ac dot be 
Ok, it seems that the bug was somewhere else, in the portal I use (tikiwiki).

 It's true that it didn't crash if I put a return just before the assignment, and that it did otherwise, but the crash was really somewhere else, due to "infinite" recursion (limited to 64 by php). I corrected the bug in tikiwiki.

 Thanks to all people who checked this, and sorry for the inconvenience.

 Regards,

 Yannick Majoros
 [2005-05-04 09:56 UTC] majoros at inma dot ucl dot ac dot be 
closing...
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Wed Sep 11 04:01:28 2024 UTC