Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5.2-win32-latest.zip

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

I've tried the latest CVS snapshot and this problem still occurs there.

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.

Fwiw, I experienced the same error with the following code and the latest PHP.

...
for($i = 0; $i < $foo; $i++) {
 ...
  for($i = 0; $i < $bar; $i++) {
    ...
  }
  ...
}
...

I have the same problem with zend_mm_heap corrupted on the error logs, when I tried to open one of the pages I programmed it show me some internal server error and that error message was in the log.

Same version php 5.2.1

I migrated my classes from php 5 to work with php 4, all worked fine again, but then for experimenting purpose I switched back from php 4 to php 5, but this time not using the keywords: private, public, constuctor and destructor. I keep the php 4 compatibility, but running the scripts on php 5.2.1 and it worked fine.

So i think that maybe there is a problem with the memory management on the classes or objects, I?m not sure, but that was producing the problem in my case.

Same problem here.

I'm trying to use horde-imp but "zend_mm_heap corrupted" problem occurs when I open admin/setup/config.php?app=imp to configure the app and the browser offers to download config.php file.

Please devs give us a working patch :)

We still don't have zero info on how to reproduce it.

Hi
 
I get the same message in my logs. I can reproduce the error in our system, but it is impossible to locate it. Sometimes I can reproduce the error by editing a comment. I add a character and the error occurs. I remove the character and the script runs perfectly. Each time I try to isolate the error I can reproduce it with an other action.

That what i could isolate is:
-load xml file with simplexml
-add a node
-clone the object
-process xpath query
-print the object with print_r
-serialize the object
-include a file (the error occurs)

When I edit the included file. E.g. remove methods or properties the script runs without errors. That is funny(o;

Version: 5.2.1
Os: ubuntu

I'm experiencing the very same problem reported by rocker_pr.

It seems to me that this problem is triggered by using PHP5 classes, but I can't provide a small testcase: no small code seems affected.

I have the same error message in my apache logs with PHP 5.2.3 zend_mm_heap corupted. I tried to track it down to a specific code but it seems to be a problem with included files (classes) which exceeds a specific size. No matter which lines I delete in my script as long as they don?t excess about 700 lines they work. As soon as the overall lines exceed about 700 lines the error occurs again. Hope this will help you to fix the problem.

I have the same problem when trying to run a fresh version of Horde with Kronolith module.

Php v5.2.3 on FreeBSD 6.2 nad apache 2.0.59.

Same problem here on OS X 10.4.10, ZendCore 2.0.1, PHP 5.2.3.

php -v
PHP 5.2.1 (cli) (built: Nov 28 2007 23:14:55) 
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies


function crash()
    {
        $row = 1;
        $handle = fopen("f.csv", "r");

        while (($data = fgetcsv($handle, 1000, ",")) !== FALSE) {
            $num = count($data);
            echo "<p> $num fields in line $row: <br /></p>\n";
            $row++;
            for ($c=0; $c < $num; $c++) {
                echo $data[$c] . "<br />\n";
            }
        }
        fclose($handle);
    
    }

f.csv has 3000 lines of 
"Email","Name"

Hi,

I have the same problem, my php version is 5.2.6:

function crash() {
 mysql_connect( "localhost" );
}

:)

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php for *NIX and
http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

Hi,

i too got the same issue and this is how the code works,

I am having some scripts to parse the HTML data and wherein i am having part of the code as ,

				$replaced_key = strtolower(str_replace("%", "percent", $key)); 
				$replaced_key = str_replace(".", "", $replaced_key); 
				$key = str_replace(" ", "_", $replaced_key); 


When i have the above code with the same variable name,

				$key = strtolower(str_ireplace("%", "percent", $key)); 
				$key = str_ireplace(".", "", $key); 
				$key = str_ireplace(" ", "_", $key); 

I get the "zend_mm_heap corrupted" error wherein when changed the code to the above way, it works fine.

Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows (zip):
 
  http://snaps.php.net/win32/php5.2-win32-latest.zip

For Windows (installer):

  http://snaps.php.net/win32/php5.2-win32-installer-latest.msi

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

I found this 'zend_mm_heap corrupted' in my apache log files.

I am using 5.2.5 with almost everything enabled. Mysqli and I am using Zend Frame work.

As far as I can tell my scripts case this (and a seg fault) when they are looping through a Zend_DB_Table_Rowset object adding rows to a table.

When the $row **goes out of scope** the script seg faults. So I get this error when the function (well method) returns a value. I stripped all code from the function apart from echos and the $row->save() and the seg faults still happen.

Ho hum...

john

Sorry, I forgot to say my server runs Red Hat Linux.

Um, I'm not sure if this is helpful, but I found the error when moving from PEAR:DB over to ZF DB objects. So I only changed DB code. OK, some psedudoish code:

class x {
  function db() {
    $rpt = new Report();
    $row = $rpt->createRow();
    $row->text = 'xyz';
    $row->save();
    echo 'OK 2';
  }
}

$x = new x();
echo 'OK';
$x->db();
echo 'OK 3';

And I see:
 OK
 OK 2
 seg fault

Also changing the function to:

class x {
  function db() {
    $rpt = new Report();
    $row = $rpt->createRow();
    $row->text = 'xyz';
    $row->save();
    echo 'OK 2';
    $row = null;
    echo 'Moooo';
  }
}

this time it seg faults at $row = null;

Hope this is of some help. It really sucks :-(

John

OK, I don't know if this is useful but I'll keep posting stuff as I find it here :-)

PHP 5.2.5 MysqlI 5.0.45

If I alter the database the seg fault goes away and I get normal exceptions or errors or data results (depending if the SQL is working) then if I change the DB back to what I need seg faults occur again. So I think it must be an error in MysqlI or MySQL... ?

John

This happens no matter what version, 5.2.1, 5.2.6 and even 5.2.7-dev (snap php5.2-200807220430)

How is it possible this many users have this bug, some even can reproduce it consistently, and the developers need backtraces?  It seems as though it is a common bug and my guess is many come here looking for a solution, do not find one, figure the zend_mm_heap corrupted is intermittent and hope for a solution soon (they do not post they too have the issue).  

I will attempt to recompile with debug and get a trace, however, this only occurs on production servers (indicating load/stress related issue when using more memory) and will take a while to get the OK to execute.  Running one of the scripts provided below to reproduce the crash does not happen for us on development systems.

this bug is over 16 months old and when it happens, it is a whopper, please do not ignore!

will be happy to provide any additional information that does not require a recompile/waiting for clearance on production.

I get this error when including files in a loop and trying to execute a loop inside one of those included files.

Concerning my previous statement: I was using output buffering in the included files. I've removed the output buffering and I'm no longer getting the error.

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php for *NIX and
http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.

Also, all problems reported here have different causes but seems to be
triggered when starting to use more memory, and the bug disappears
when using less memory, or by changing/commenting a random line in
your code.
 
For me it looks like a hardware problem (dead memory segments), please
use a memory testing tool (e.g. memtest86 [1]) or try to reproduce the
bug on an other computer. Dead memory segments can cause exactly that
sort of problems (corrupted memory, crashes, etc).

[1] memtest86 http://www.memtest.org/#downiso

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

> For me it looks like a hardware problem (dead memory segments), please
> use a memory testing tool (e.g. memtest86 [1]) or try to reproduce the
> bug on an other computer. Dead memory segments can cause exactly that
> sort of problems (corrupted memory, crashes, etc).

(See my previous messages posted above...)

I just tried my code on a brand new HP server, this time on CentOS 5.2, PHP 5.2.0, MySQLI 5.0.45.

I still get seg faults in httpd error logs files.

So I don't see how this is a hardware fault. I see this error using the same PHP code on 3 different servers, 2 different operating systems and 2 different MySQL versions. I also changed my tables from MyISAM to InnoDB and *STILL* get seg faults.

I use Zend Framework and I have changed DB adapters from Mysqli to PDO_MYSQL, but both cause seg faults. Does that cover everything apart from the PHP version?

monk.e.boy

OK, it took me a couple of days to figure out how to do a core debug, but here is the offending gdb info:


#0  0x011faba6 in zend_if_strlen (ht=1, return_value=0xb77ef1ec, return_value_ptr=0x0,
    this_ptr=0x0, return_value_used=1) at /home/admin/downloads/php-5.2.6/Zend/zend_builtin_functions.c:286
286             RETVAL_LONG(Z_STRLEN_PP(str));
(gdb) bt
#0  0x011faba6 in zend_if_strlen (ht=1, return_value=0xb77ef1ec, return_value_ptr=0x0, this_ptr=0x0, return_value_used=1)
    at /home/admin/downloads/php-5.2.6/Zend/zend_builtin_functions.c:286
#1  0x01209ee9 in execute_internal (execute_data_ptr=0xbff61270, return_value_used=1) at /home/admin/downloads/php-5.2.6/Zend/zend_execute.c:1373
#2  0x005e31b0 in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#3  0x0120a990 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff61270) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:202
#4  0x01209fcd in execute (op_array=0xb77a99b4) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#5  0x005e312d in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#6  0x0120a219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff61730) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#7  0x01209fcd in execute (op_array=0xb77b07e8) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#8  0x005e312d in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#9  0x0120a219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff618a0) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#10 0x01209fcd in execute (op_array=0xb77bc560) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#11 0x005e312d in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#12 0x0120a219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff61af0) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#13 0x01209fcd in execute (op_array=0xb77da2dc) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#14 0x005e312d in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#15 0x0120a219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff61c90) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#16 0x01209fcd in execute (op_array=0xb77da62c) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#17 0x005e312d in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#18 0x0120a219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff61ee0) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#19 0x01209fcd in execute (op_array=0xb77da2dc) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#20 0x005e312d in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#21 0x0120a219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff62080) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#22 0x01209fcd in execute (op_array=0xb77da62c) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#23 0x005e312d in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#24 0x0120a219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff622d0) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#25 0x01209fcd in execute (op_array=0xb77da2dc) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#26 0x005e312d in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#27 0x0120a219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff62470) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#28 0x01209fcd in execute (op_array=0xb77da62c) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#29 0x005e312d in php_DBG_init_globals () from /usr/local/lib/php/extensions/no-debug-non-zts-20060613/dbg.so-5.2.x
#30 0x0120a219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff62940) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#31 0x01209fcd in execute (op_array=0xb779aa6c) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92

Here I am following the instructions on: http://bugs.php.net/bugs-generating-backtrace.php


(gdb) frame 1
#1  0x01209ee9 in execute_internal (execute_data_ptr=0xbff61270, return_value_used=1) at /home/admin/downloads/php-5.2.6/Zend/zend_execute.c:1373
1373            ((zend_internal_function *) execute_data_ptr->function_state.function)->handler(execute_data_ptr->opline->extended_value, *return_value_ptr, execute_data_ptr->function_state.function->common.return_reference?return_value_ptr:NULL, execute_data_ptr->object, return_value_used TSRMLS_CC);

(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
$1 = 0x136e2a3 "strlen"


I have a copy of this core dump, if you want it email me :-)

My previous comments tell my story...

john

Um, one more thing. As a programmer of 10+ years having programmed about 7 or 8 languages seriously over that time, this feels like a race condition.

Occasionally the page request works. Putting in sleep commands effects where in the script it crashes. Attaching the debugger and slowly stepping through the code causes it not to crash.

John

Thanks for the backtrace.
It seems you are using a third party extension, could you please provide a backtrace with all third-party extensions disabled ? 

#0  0x064a8ba6 in zend_if_strlen (ht=1, return_value=0xb7944458, return_value_ptr=0x0, this_ptr=0x0, return_value_used=1)
    at /home/admin/downloads/php-5.2.6/Zend/zend_builtin_functions.c:286
#1  0x064b8821 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0af40)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:200
#2  0x064b7fcd in execute (op_array=0xb78f4044) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#3  0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0b3e0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#4  0x064b7fcd in execute (op_array=0xb78ffa88) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#5  0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0b530)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#6  0x064b7fcd in execute (op_array=0xb78efb98) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#7  0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0b760)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#8  0x064b7fcd in execute (op_array=0xb792ef14) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#9  0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0b8e0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#10 0x064b7fcd in execute (op_array=0xb792f264) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#11 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0bb10)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#12 0x064b7fcd in execute (op_array=0xb792ef14) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#13 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0bc90)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#14 0x064b7fcd in execute (op_array=0xb792f264) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#15 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0bec0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#16 0x064b7fcd in execute (op_array=0xb792ef14) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#17 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0c040)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#18 0x064b7fcd in execute (op_array=0xb792f264) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#19 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0c4f0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#20 0x064b7fcd in execute (op_array=0xb78e7810) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#21 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0c680)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#22 0x064b7fcd in execute (op_array=0xb790b140) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#23 0x064ce857 in ZEND_INCLUDE_OR_EVAL_SPEC_VAR_HANDLER (execute_data=0xbff0c7d0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:7759
#24 0x064b7fcd in execute (op_array=0xb7b5bb40) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#25 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0c9a0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#26 0x064b7fcd in execute (op_array=0xb7adbdfc) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#27 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0cbb0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#28 0x064b7fcd in execute (op_array=0xb7b51040) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#29 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0cd40)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#30 0x064b7fcd in execute (op_array=0xb7b54314) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#31 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0ce80)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#32 0x064b7fcd in execute (op_array=0xb7b54b94) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#33 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0d010)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#34 0x064b7fcd in execute (op_array=0xb7cfe260) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#35 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0d340)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#36 0x064b7fcd in execute (op_array=0xb7a861b8) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#37 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0da80)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#38 0x064b7fcd in execute (op_array=0xb7b6960c) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#39 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0e7b0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#40 0x064b7fcd in execute (op_array=0xb7d19f04) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#41 0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0eb10)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
#42 0x064b7fcd in execute (op_array=0xb7cf9f50) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
#43 0x0649e8a9 in zend_execute_scripts (type=8, retval=0xd, file_count=3) at /home/admin/downloads/php-5.2.6/Zend/zend.c:1134
#44 0x06466b01 in php_execute_script (primary_file=0xbff10dd0) at /home/admin/downloads/php-5.2.6/main/main.c:2005
#45 0x0651a3a4 in php_handler (r=0x9714788) at /home/admin/downloads/php-5.2.6/sapi/apache2handler/sapi_apache2.c:629
#46 0x00e1c9d7 in ap_run_handler () from /usr/sbin/httpd
#47 0x00e1ce43 in ap_invoke_handler () from /usr/sbin/httpd
#48 0x00e194f8 in ap_internal_redirect () from /usr/sbin/httpd
#49 0x002e8487 in ?? () from /etc/httpd/modules/mod_rewrite.so
#50 0x09714778 in ?? ()
#51 0x0970bdb8 in ?? ()
#52 0x00000000 in ?? ()


########################################################

#0  0x064a8ba6 in zend_if_strlen (ht=1, return_value=0xb7944458,
    return_value_ptr=0x0, this_ptr=0x0, return_value_used=1) at /home/admin/downloads/php-5.2.6/Zend/zend_builtin_functions.c:286
286             RETVAL_LONG(Z_STRLEN_PP(str));

########################################################


(gdb) frame 2
#2  0x064b7fcd in execute (op_array=0xb78f4044) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
92                      if (EX(opline)->handler(&execute_data TSRMLS_CC) > 0) {
(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
$1 = 0x661c2a3 "strlen"
(gdb) frame 3
#3  0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0b3e0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
234                     zend_execute(EG(active_op_array) TSRMLS_CC);
(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
$2 = 0x661c2a3 "strlen"
(gdb) frame 4
#4  0x064b7fcd in execute (op_array=0xb78ffa88) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
92                      if (EX(opline)->handler(&execute_data TSRMLS_CC) > 0) {
(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
$3 = 0x661c2a3 "strlen"
(gdb) frame 5
#5  0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0b530)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
234                     zend_execute(EG(active_op_array) TSRMLS_CC);
(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
$4 = 0x661c2a3 "strlen"
(gdb) frame 6
#6  0x064b7fcd in execute (op_array=0xb78efb98) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
92                      if (EX(opline)->handler(&execute_data TSRMLS_CC) > 0) {
(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
$5 = 0x661c2a3 "strlen"
(gdb) frame 7
#7  0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0b760)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
234                     zend_execute(EG(active_op_array) TSRMLS_CC);
(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
$6 = 0x661c2a3 "strlen"
(gdb) frame 8
#8  0x064b7fcd in execute (op_array=0xb792ef14) at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:92
92                      if (EX(opline)->handler(&execute_data TSRMLS_CC) > 0) {
(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
$7 = 0x661c2a3 "strlen"
(gdb) frame 9
#9  0x064b8219 in zend_do_fcall_common_helper_SPEC (execute_data=0xbff0b8e0)
    at /home/admin/downloads/php-5.2.6/Zend/zend_vm_execute.h:234
234                     zend_execute(EG(active_op_array) TSRMLS_CC);
(gdb) print (char *)(executor_globals.function_state_ptr->function)->common.function_name
$8 = 0x661c2a3 "strlen"

########################################################


PLEASE email me for more info if you want it, I am ***NOT*** actively watching this thread (can I RSS it??)

John

Re: My last post: I disabled as much stuff as I could before running the bad page.

John

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

hello?

We are experiencing multiple zend_mm_heap corrupted errors daily on our production server during peak load.

During off-peak periods, all scripts work as expected.

PHP 5.2.2
RedHat Linux 2.6.9-78.0.5.ELsmp

Why is this set to No Feedback when there's a debug dump provided?

The more comments the more this sounds like a race condition. Looks like it would be almost impossible to bug hunt.

Have you tried the 6 version? Maybe this has been fixed?

John

After my debugging - it seems script runs to the end (trigger_error even in last line works). Adding one

print(null);

in random place of script did help me! But I had this problem for 3 places, it help only for one. And now is the best :) Huge block of

print(null);print(null).....

is enough in my case :)
I only have hope - my customer will not look into source ;)

yellow1pl

On the other hand now i had a lot of

[notice] child pid 29716 exit signal Segmentation fault (11)

in log, but at least it sends output befor exit,so I can live with it ;)

We started seeing annoying random crashes in quite large app after upgrade to Ubuntu Hardy (32bit). PHP Version 5.2.4-2ubuntu5.3

This is starting to be quite serious issue.

ok, zend crashes at the end, when it has to send data from buffers and free memory. so best solution is to flush buffers on your own. it's enough to put in last line:

ob_end_flush(); flush();


this bug was found for the first time almost 2 years ago. maybe it is hard to track, becaus it appears only in bigger aps with a lot of php5 classes, but... 2 years? and still no idea what is going on? even more - claiming there is no problem at all, only because it's impossible to recreate this bug in 20 lines of code? for me - php after so many years of development is still so unstable, it simply no longer exists, sorry...

I have run into this problem too. I have not been able to make a short example script to demonstrate the problem since removing seemingly unrelated parts of code makes the problem disappear.

The error is generated after the PHP script has completed. The actual problem seems to stem from calling a some static method from a class that has not yet been included. The class is included by an __autoload function. Manually including the class first seems to fix the problem, but doing random stuff in general seems to do that :)

The problem occurs when returning from the function, since throwing an exception or die()-ing at that point does not show the problem.

When building php with --enable-debug, the problem goes away. The problem also goes away when not using --enable-debug, but adding -DZEND_MM_HEAP_PROTECTION.

Since the problem goes away when using --enable-debug, I generated the following backtraces with a modified zend_mm_panic(...) in zend_alloc.c to remove the #if ZEND_DEBUG macro.

#0  0x00007f9b736d45a7 in kill () from /lib/libc.so.6
#1  0x0000000000596440 in zend_mm_panic (message=<value optimized out>) at /usr/local/src/php-5.2.8/Zend/zend_alloc.c:94
#2  0x0000000000596a45 in _zend_mm_free_int (heap=0x96f300, p=0xb) at /usr/local/src/php-5.2.8/Zend/zend_alloc.c:833
#3  0x00000000005bc298 in zend_hash_destroy (ht=0xd71040) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#4  0x00000000005cbb49 in zend_object_std_dtor (object=0xd6c570) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:45
#5  0x00000000005cbb69 in zend_objects_free_object_storage (object=0x25e3) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:122
#6  0x00000000005cf1ae in zend_objects_store_del_ref_by_handle (handle=63) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:206
#7  0x00000000005cf1de in zend_objects_store_del_ref (zobject=0xd6ffe8) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:168
#8  0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xd79d38) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#9  0x00000000005bc298 in zend_hash_destroy (ht=0xcf42f8) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#10 0x00000000005b12bf in _zval_dtor_func (zvalue=0xd77118) at /usr/local/src/php-5.2.8/Zend/zend_variables.c:43
#11 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xb74de0) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#12 0x00000000005bc298 in zend_hash_destroy (ht=0xd01938) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#13 0x00000000005cbb49 in zend_object_std_dtor (object=0xd6cc88) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:45
#14 0x00000000005cbb69 in zend_objects_free_object_storage (object=0x25e3) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:122
#15 0x00000000005cf1ae in zend_objects_store_del_ref_by_handle (handle=62) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:206
#16 0x00000000005cf1de in zend_objects_store_del_ref (zobject=0xd6e378) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:168
#17 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xd79e70) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#18 0x00000000005bc298 in zend_hash_destroy (ht=0xd7a3d8) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#19 0x00000000005b12bf in _zval_dtor_func (zvalue=0xd7a3b0) at /usr/local/src/php-5.2.8/Zend/zend_variables.c:43
#20 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xb6e258) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#21 0x00000000005bc298 in zend_hash_destroy (ht=0xd71800) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#22 0x00000000005cbb49 in zend_object_std_dtor (object=0xd6e150) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:45
#23 0x00000000005cbb69 in zend_objects_free_object_storage (object=0x25e3) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:122
#24 0x00000000005cf1ae in zend_objects_store_del_ref_by_handle (handle=61) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:206
#25 0x00000000005cf1de in zend_objects_store_del_ref (zobject=0xd6df98) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:168
#26 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xcf5db8) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#27 0x00000000005bc298 in zend_hash_destroy (ht=0xcf5bc8) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#28 0x00000000005b12bf in _zval_dtor_func (zvalue=0xcf5ba0) at /usr/local/src/php-5.2.8/Zend/zend_variables.c:43
#29 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xce8400) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#30 0x00000000005bc298 in zend_hash_destroy (ht=0xc96598) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#31 0x00000000005cbb49 in zend_object_std_dtor (object=0xccafd0) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:45
#32 0x00000000005cbb69 in zend_objects_free_object_storage (object=0x25e3) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:122
#33 0x00000000005cf1ae in zend_objects_store_del_ref_by_handle (handle=38) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:206
#34 0x00000000005cf1de in zend_objects_store_del_ref (zobject=0xcb2090) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:168
#35 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xccb418) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#36 0x00000000005bc298 in zend_hash_destroy (ht=0xcccbf0) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#37 0x00000000005b12bf in _zval_dtor_func (zvalue=0xc95d00) at /usr/local/src/php-5.2.8/Zend/zend_variables.c:43
#38 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xce8c10) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#39 0x00000000005bc298 in zend_hash_destroy (ht=0xccc3c8) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#40 0x00000000005cbb49 in zend_object_std_dtor (object=0xc96e50) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:45
#41 0x00000000005cbb69 in zend_objects_free_object_storage (object=0x25e3) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:122
#42 0x00000000005cf1ae in zend_objects_store_del_ref_by_handle (handle=36) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:206
#43 0x00000000005cf1de in zend_objects_store_del_ref (zobject=0xccd2a8) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:168
#44 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xcddd50) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#45 0x00000000005bc298 in zend_hash_destroy (ht=0xcccb28) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#46 0x00000000005b12bf in _zval_dtor_func (zvalue=0xcb2118) at /usr/local/src/php-5.2.8/Zend/zend_variables.c:43
#47 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xce63d0) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#48 0x00000000005bc298 in zend_hash_destroy (ht=0xccb4b8) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#49 0x00000000005cbb49 in zend_object_std_dtor (object=0xccc298) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:45
#50 0x00000000005cbb69 in zend_objects_free_object_storage (object=0x25e3) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:122
#51 0x00000000005cf1ae in zend_objects_store_del_ref_by_handle (handle=32) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:206
#52 0x00000000005cf1de in zend_objects_store_del_ref (zobject=0xcd4e28) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:168
#53 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xbec940) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#54 0x00000000005bc298 in zend_hash_destroy (ht=0xc06770) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#55 0x00000000005b12bf in _zval_dtor_func (zvalue=0xcccb80) at /usr/local/src/php-5.2.8/Zend/zend_variables.c:43
#56 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xce7a90) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#57 0x00000000005bc298 in zend_hash_destroy (ht=0xccd2d0) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#58 0x00000000005cbb49 in zend_object_std_dtor (object=0xcca568) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:45
#59 0x00000000005cbb69 in zend_objects_free_object_storage (object=0x25e3) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:122
#60 0x00000000005cf1ae in zend_objects_store_del_ref_by_handle (handle=27) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:206
#61 0x00000000005cf1de in zend_objects_store_del_ref (zobject=0xcca998) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:168
#62 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xce68d0) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#63 0x00000000005bc298 in zend_hash_destroy (ht=0xcb2700) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#64 0x00000000005b12bf in _zval_dtor_func (zvalue=0xcb26d8) at /usr/local/src/php-5.2.8/Zend/zend_variables.c:43
#65 0x00000000005a4d16 in _zval_ptr_dtor (zval_ptr=0xc53520) at /usr/local/src/php-5.2.8/Zend/zend_variables.h:35
#66 0x00000000005bc298 in zend_hash_destroy (ht=0xc066b8) at /usr/local/src/php-5.2.8/Zend/zend_hash.c:526
#67 0x00000000005cbb49 in zend_object_std_dtor (object=0xc00878) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:45
#68 0x00000000005cbb69 in zend_objects_free_object_storage (object=0x25e3) at /usr/local/src/php-5.2.8/Zend/zend_objects.c:122
#69 0x00000000005ced51 in zend_objects_store_free_object_storage (objects=0x96dce0) at /usr/local/src/php-5.2.8/Zend/zend_objects_API.c:89
#70 0x00000000005a529c in shutdown_executor () at /usr/local/src/php-5.2.8/Zend/zend_execute_API.c:299
#71 0x00000000005b18e2 in zend_deactivate () at /usr/local/src/php-5.2.8/Zend/zend.c:860
#72 0x000000000057017e in php_request_shutdown (dummy=<value optimized out>) at /usr/local/src/php-5.2.8/main/main.c:1492
#73 0x000000000063596d in main (argc=1, argv=0x7fff7e8a86b8) at /usr/local/src/php-5.2.8/sapi/cgi/cgi_main.c:2052


----
The following backtrace was generated by 'shell_exec('kill -s SEGV '.getmypid());' inside the function that causes the problem when it return's. It might be usefull

#0  0x00007f55d4f458ab in fork () from /lib/libc.so.6
#1  0x00007f55d4f125ad in _IO_proc_open () from /lib/libc.so.6
#2  0x00007f55d4f12819 in popen () from /lib/libc.so.6
#3  0x0000000000518a17 in zif_shell_exec (ht=<value optimized out>, return_value=0xdaf568, return_value_ptr=<value optimized out>, this_ptr=<value optimized out>,
    return_value_used=<value optimized out>) at /usr/local/src/php-5.2.8/ext/standard/exec.c:462
#4  0x00000000005e0af7 in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe00af9c0) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:200
#5  0x00000000005d0923 in execute (op_array=0xdb1c00) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:92
#6  0x00000000005e05b7 in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe00b0530) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:234
#7  0x00000000005d0923 in execute (op_array=0xd9b770) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:92
#8  0x0000000000604b2f in ZEND_INCLUDE_OR_EVAL_SPEC_CV_HANDLER (execute_data=0x7fffe00b0d00) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:20105
#9  0x00000000005d0923 in execute (op_array=0xb70de8) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:92
#10 0x00000000005e05b7 in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe00b1230) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:234
#11 0x00000000005d0923 in execute (op_array=0xb24548) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:92
#12 0x0000000000604b2f in ZEND_INCLUDE_OR_EVAL_SPEC_CV_HANDLER (execute_data=0x7fffe00b1460) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:20105
#13 0x00000000005d0923 in execute (op_array=0xb385b8) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:92
#14 0x00000000005e05b7 in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe00b1a70) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:234
#15 0x00000000005d0923 in execute (op_array=0xb37e98) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:92
#16 0x00000000005e05b7 in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe00b2540) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:234
#17 0x00000000005d0923 in execute (op_array=0xb213e0) at /usr/local/src/php-5.2.8/Zend/zend_vm_execute.h:92
#18 0x00000000005b15dd in zend_execute_scripts (type=8, retval=<value optimized out>, file_count=3) at /usr/local/src/php-5.2.8/Zend/zend.c:1134
#19 0x000000000056f948 in php_execute_script (primary_file=0x7fffe00b6cc0) at /usr/local/src/php-5.2.8/main/main.c:2023
#20 0x0000000000636532 in main (argc=1, argv=0x7fffe00b6ec8) at /usr/local/src/php-5.2.8/sapi/cgi/cgi_main.c:1989

If there is anything I can to to help to resolve this issue, please ask.

This script may help to reproduce the bug.
It is a stupid script, but sometimes the two
generated files (teste.txt, teste1.txt)
are different. But they should be identical.

<?php
file_put_contents('teste.txt', str_repeat("ABCDEFGHIJKLMNOPQRSTUVWXYZ\n", 10000));

$output = file_get_contents('teste.txt');

for ($n=1; $n<=10000; $n++)
{
    $output = str_replace('G', 'G', $output);
}
file_put_contents('teste2.txt', $output);
?>

Interestingly enough, changing values in php.ini helps:

http://trac.macports.org/ticket/18004#comment:10

Just ran into the same problem problem on PHP5.3b1, so it seems this error is bug is still around.
Unfortunately, I don't have a simple script to reproduce the problem.
My config.nice:

'./configure' \
'--prefix=/opt' \
'--with-apxs2=/usr/bin/apxs2' \
'--disable-short-tags' \
'--with-openssl' \
'--with-zlib' \
'--enable-bcmath' \
'--with-bz2=/bin/bzip2' \
'--enable-calendar' \
'--with-curl' \
'--with-curlwrappers' \
'--enable-exif' \
'--enable-ftp' \
'--with-gd' \
'--with-jpeg-dir=/usr/lib' \
'--with-png-dir=/usr/lib' \
'--with-xpm-dir=/usr/lib' \
'--with-ttf' \
'--with-t1lib' \
'--enable-gd-native-ttf' \
'--enable-gd-jis-conv' \
'--with-gettext' \
'--with-imap' \
'--with-imap-ssl' \
'--with-ldap' \
'--with-ldap-sasl' \
'--enable-mbstring' \
'--with-mcrypt' \
'--with-mhash' \
'--with-ming' \
'--with-mysql=mysqlnd' \
'--with-mysqli=mysqlnd' \
'--with-ncurses' \
'--with-pdo-mysql' \
'--with-pspell' \
'--with-readline' \
'--with-snmp' \
'--enable-soap' \
'--enable-sockets' \
'--without-sqlite' \
'--enable-sqlite-utf8' \
'--with-tidy' \
'--enable-wddx' \
'--with-xmlrpc' \
'--with-xsl' \
'--enable-zip' \
'--with-pear' \
'--with-kerberos' \
'--with-config-file-path=/etc/php5-3' \

System configuration:
OS: Ubuntu Linux 8.10
Apache 2.2.9

Apache/2.0.63 (Win32) PHP/5.2.8

FWIW, this happens when running as a service.  Running in the console it's fine.

I found it in response to bug #46842, after rolling back from Apache/2.2.  I cannot say for sure if they are related.

The same problem appears from a allegedly successful compilation op PHP 5.2.9 on RHEL5 64 bit using -m32 CFLAG so that the binaries are 32 bit.

The compilation appears to complete successfully:


Apache 2.0.59 compiled w/o any problems with the following configure and it works fine.
./configure --prefix=/apps/apache2 --with-expat=builtin

PHP is configured with the following options:
./configure --with-apxs2=/apps/apache2/bin/apxs --build=i386-redhat-linux --with-pic --with-gd --with-zlib --with-config-file-path=/apps/apache2/conf --with-libdir=/lib/ --enable-debug

And after the successful run, make test was run with the following errors:

[Tue Mar  3 11:16:22 2009]  Script:  '/apps/source/php-5.2.9/run-tests.php'
---------------------------------------
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(421) : Block 0x08c71270 status:
Beginning:      OK (allocated on /apps/source/php-5.2.9/main/streams/plain_wrapper.c:144, 108 bytes)
    Start:      OK
      End:      Overflown (magic=0x00000000 instead of 0xD03365E6)
                At least 4 bytes overflown
---------------------------------------
[Tue Mar  3 11:16:22 2009]  Script:  '/apps/source/php-5.2.9/run-test-info.php'
---------------------------------------
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(421) : Block 0x097cdd80 status:
Beginning:      OK (allocated on /apps/source/php-5.2.9/main/streams/plain_wrapper.c:160, 108 bytes)
    Start:      OK
      End:      Overflown (magic=0x00000000 instead of 0x512474AC)
                At least 4 bytes overflown
---------------------------------------
[Tue Mar  3 11:16:22 2009]  Script:  '/apps/source/php-5.2.9/run-test-info.php'
---------------------------------------
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(421) : Block 0x097cdb78 status:
Beginning:      OK (allocated on /apps/source/php-5.2.9/main/streams/plain_wrapper.c:160, 108 bytes)
    Start:      OK
      End:      Overflown (magic=0x00000000 instead of 0x512474AC)
                At least 4 bytes overflown
---------------------------------------
[Tue Mar  3 11:16:22 2009]  Script:  '/apps/source/php-5.2.9/run-test-info.php'
---------------------------------------
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(421) : Block 0x097cd9ac status:
Beginning:      OK (allocated on /apps/source/php-5.2.9/main/streams/plain_wrapper.c:160, 108 bytes)
    Start:      OK
      End:      Overflown (magic=0x00000000 instead of 0x512474AC)
                At least 4 bytes overflown
---------------------------------------
[Tue Mar  3 11:16:22 2009]  Script:  '/apps/source/php-5.2.9/run-test-info.php'
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(160) :  Freeing 0x097CD9AC (108 bytes), script=/apps/source/php-5.2.9/run-test-info
.php
/apps/source/php-5.2.9/ext/standard/php_fopen_wrapper.c(312) : Actual location (location was relayed)
Last leak repeated 2 times
=== Total 3 memory leaks detected ===
[Tue Mar  3 11:16:22 2009]  Script:  '/apps/source/php-5.2.9/run-tests.php'
---------------------------------------
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(421) : Block 0x08c734c4 status:
Beginning:      OK (allocated on /apps/source/php-5.2.9/main/streams/plain_wrapper.c:292, 108 bytes)
    Start:      OK
      End:      Overflown (magic=0x00000000 instead of 0xD03365E6)
                At least 4 bytes overflown
---------------------------------------
[Tue Mar  3 11:16:22 2009]  Script:  '-'
---------------------------------------
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(421) : Block 0x086d7038 status:
Beginning:      OK (allocated on /apps/source/php-5.2.9/main/streams/plain_wrapper.c:160, 108 bytes)
    Start:      OK
      End:      Overflown (magic=0x00000000 instead of 0x4C780131)
                At least 4 bytes overflown
---------------------------------------
[Tue Mar  3 11:16:22 2009]  Script:  '-'
---------------------------------------
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(421) : Block 0x086d6e30 status:
Beginning:      OK (allocated on /apps/source/php-5.2.9/main/streams/plain_wrapper.c:160, 108 bytes)
    Start:      OK
      End:      Overflown (magic=0x00000000 instead of 0x4C780131)
                At least 4 bytes overflown
---------------------------------------
[Tue Mar  3 11:16:22 2009]  Script:  '-'
---------------------------------------
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(421) : Block 0x086d6c64 status:
Beginning:      OK (allocated on /apps/source/php-5.2.9/main/streams/plain_wrapper.c:160, 108 bytes)
    Start:      OK
      End:      Overflown (magic=0x00000000 instead of 0x4C780131)
                At least 4 bytes overflown
---------------------------------------
[Tue Mar  3 11:16:22 2009]  Script:  '-'
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(160) :  Freeing 0x086D6C64 (108 bytes), script=-
/apps/source/php-5.2.9/ext/standard/php_fopen_wrapper.c(312) : Actual location (location was relayed)
Last leak repeated 2 times
=== Total 3 memory leaks detected ===
[Tue Mar  3 11:16:22 2009]  Script:  '/apps/source/php-5.2.9/run-tests.php'
---------------------------------------
/apps/source/php-5.2.9/main/streams/plain_wrapper.c(421) : Block 0x08c73f44 status:
Beginning:      OK (allocated on /apps/source/php-5.2.9/main/streams/plain_wrapper.c:292, 108 bytes)
    Start:      OK
      End:      Overflown (magic=0x00000000 instead of 0xD03365E6)
                At least 4 bytes overflown
---------------------------------------
zend_mm_heap corrupted
/bin/sh: line 23: 32041 Segmentation fault      TEST_PHP_EXECUTABLE=/apps/source/php-5.2.9/sapi/cli/php TEST_PHP_SRCDIR=/apps/source/ph
p-5.2.9 CC="gcc" /apps/source/php-5.2.9/sapi/cli/php -n -c /apps/source/php-5.2.9/tmp-php.ini -d 'open_basedir=' -d 'output_buffering=0
' -d 'memory_limit=-1' /apps/source/php-5.2.9/run-tests.php -n -c /apps/source/php-5.2.9/tmp-php.ini -d extension_dir=/apps/
source/php-5.2.9/modules/ ` if test "x" != "x"; then for i in ""; do . $i; /apps/source/php-5.2.9/build/shtool echo -n -- " -d extension=$dlname";
 done; fi; if test "x" != "x"; then for i in ""; do . $i; /apps/source/php-5.2.9/build/shtool echo -n -- " -d zend_extension_debug=/app
s/source/php-5.2.9/modules/$dlname"; done; fi`
make: [test] Error 139 (ignored)

I think this is because the configure script assesses the intmax_t as 4 as opposed to 8 and all of the integers are overflowing with 4 bytes. Just a guess but comparing to an other environment where I managed to compile it successfully, these appear to be the main differences in config.log.

Ran into the same problem and read most of the posts in this report. Well, I don't expect PHP developers to ever find this bug. Don't you get annoyed by template-driven posts asking for information they can't use?

HERE COMES MY ADVICE: Reading hints on expecting a race condition lead me to installing suhosin, which is an extension to PHP increasing its integrity and security. Guess what, it helped me out of this trouble. This is no ad, so I won't provide a link here. Just google the name ...

Maybe PHP developers shouldn't use templates requesting tons of backtracks providing obviously useless information, but invest some time in revising observers for the internal memory management of PHP as this is obviously causing the trouble.

Soletan, thanks for advice but it seems that Suhosin is not 100% solution. We are running Ubuntu Hardy (8.04 LTS) server, 32bit. Using standard PHP 5.2.4 Apache2 module package which already includes Suhosin patch. We still experience this bug...

I'm surprised this isn't being talked about more. I see it occasionally, and I am using Zend Framework. Why don't other people using ZF see it?

I have this problem too.
Configuration: PHP 5.2.8 (Win32), Apache 2.2.11, MySQL 5.1.31, OS WinXP.
I have this bug, when i try run phpmyadmin (all versions). Apache restarted and i found in apache's logs the message "zend_mm_heap corrupted".

Sorry, my english is weak ;-)

Apache 2.0.x - problem does not occur.

Hello,

This is the first time I see exactly the same message you all have.
You may use an accelerator (such as eAccelerator, I saw many results for this error on their forums).

Personally, I try to use the Zend Accelerator and Loader provided by the Zend Platform 3.6.2 and it fails (Fatal Error on accessing an object as an array... although it implements the ArrayAccess!). Yesterday evening, I tried to blacklist the supposed 'bad' file and got the famous error 'zend_mm_heap corrupted' :)

I soon as I disable the 'Code Acceleration', I got no troubles. It seems it's not due to the PHP Core, but maybe a change on it that has broken the third party accelerators...

Voila :),
Wilfried Loche

Hello,

I too have been able to recreate this bug with php 5.2.9

It occurrs when UPGRADING from Mysql 5.0.45 x64 el5 to Mysql 5.1.x x64 el5. (mysql 5.1.25 5.1.30 5.1.33 5.1.34

The error occurrs when I recompile PHP against the new Mysql-devel 5.1.x header files.

I've tried compiling against the native PHP mysql libraries and also specifying the mysql libraries in /usr.

I believe that the heap error occurrs due to a debug necesity becuase I followed the advice of a previous comment(THANK YOU!!!!) I placed enable-debug in the configure command and IT WORKS!

I can't pin it down for sure but there is some incompatibility with mysql 5.1.x and the php-mysql extension that calls a function from the debug extension.

I think the solution lies in checking the mysql extension in PHP and finding where the debug function is called and only calling with the debug extension enabled / loaded.

Hi,

Just to echo the previous comment, I have experienced the same crash with PHP 5.2.9-2 under Win32 (Server 2003 R2), when upgrading the MySQL DLLs from 5.0.77 to 5.1.34. I am bypassing the copy of libmysql.dll provided with PHP in order to work around another bug, and I found that when I upgraded to libmysql.dll 5.1.34, PHP crashed out with the 'zend_mm_heap corrupted' error when running certain scripts (especially ones that access MySQL, like phpMyAdmin), which in turn caused IIS to error out with 'CGI Error: The specified CGI application misbehaved by not returning a complete set of HTTP headers.'

The issue is resolved if I copy libmysql.dll version 5.0.77 into my PHP path, which indicates that this may be one of the causes of the problem.

I can reproduce this bug reliably.

Well, I we mysql, the installed webapp (mediawiki) is not using it, it's version 5.0.70, we got the debug extension enabled, and we still get the bug.

It crashes the whole apache (2.2.11) instance! We don't have any special PHP extensions on it.

But frankly, by knowing the quality of the Zend engine code itself, I do not have any hopes that there is anyone who works on that code, and is even remotely able to fix this. :P
I recommend switching to a real language, and stop using this VisualBasic of web languages. :/

Sorry, after all this time, (255 days, or 8.5 months!), I have no good words for this anymore. It basically makes PHP useless, and any new PHP development (webapps), are now completely out of question in our company.

This has turned into a catch-all bug report for any generic memory corruption, not even necessarily in PHP itself.  It could be a 3rd-party library stomping on memory as shown by some of the reports of things going away when upgrading a lib.  As a single bug report it isn't of much use to us, but the backtraces to help and might point us to an actual problem in PHP.

Finnally, found solution on Ubuntu Hardy.

Add line:
export USE_ZEND_ALLOC=0

to file:
/etc/apache2/envvars

and restart apache... Crashing stopped.

On Fedora / centOS

edit:
/usr/local/apache2/bin/apachectl

and add:
export USE_ZEND_ALLOC=0

and stop & start apache.

P.S.: i think you are underestimating the number of occurences for this bug and, as so, the frustration amongst PHP developers

Hi all,

Someone have the solution for os windows XP

thanks

to answer tdikarim at hotmail dot com's question, you can probably add

set USE_ZEND_ALLOC=0 within your apachectl.bat under your apache 
installation directory /bin. not, for this to work, you should start 
apache from command line and not as a 'service'. also, may I suggest 
that you probably try to run with php 5.2.10 or php 5.3 (from 
windows.php.net) and see if you are able to reproduce this issue 
before you consider using the work around (using USE_ZEND_ALLOC). 
please note that using USE_ZEND_ALLOC=0 will have some performance 
penalty. 

now, looking closely into this bug, as Rasmus mentioned earler, this 
bug has become a catch-all for memory corruption.

looking at the some of the stack traces and with so many people have 
reported this , this is probably a valid bug and we would love to fix 
this issue provided some one can provide us a script (even if it is 
complicated) that any one of us can reproduce. this would quickly help 
us to get to a solution. 

some of the folks have mentioned that they use redhat / fedora but 
have failed to mention whether they are using php with apache's pre-
fork (which is fortunately the default )mpm or worker mpm . 

(note: if you don't know what is worker mpm, you are most likely using 
the default pre-fork mpm !).  

why is this important ? - this is because if you are running your 
apache in threaded mode but if php is not compiled with 'thread-
safety' option, then one can run into lot of weird race condition. but 
with pre-fork apache, you very rarely run into a race condition. 

so, please when you report this crash, please provide us the php 
version and is it compiled with ZTS (zend thread safety) enabled  and  
is your web server multi-threaded. for example, you can get apache's 
server information by running 'httpd -V' from your linux box.

I bring some additional information.
The error occurred with the version of PHP 5.2.1 and version 2.2.13 of Apache.

This is done by creating a large PDF to do more than 35,000 pages using File_pdf (last release) PEAR.

I just installed version 5.3 and I'm going with this test without using USE_ZEND_ALLOC.

For your information, I find pale apachectl.bat file in my apache directory.

I install apache and php via EasyPhp v2.0.0.0
I advise you to install something else?

I will keep you informed of my test with version 5.3. It will take a few hours

Again thank you
Karim

Hi ,

I have tested with the version 5.3 of PHP with no success.
I have this error:
Fatal error: Out of memory (allocated 564920320) (tried to allocate 39063398 bytes) in I:\srvDevPHP\PHP_PEAR\File\PDF.php on line 3191
zend_mm_heap corrupted
The line 3191 is << $this->_buffer .= $s . "\n"; >> of the _out function.

How can i use the USE_ZEND_ALLOC parameter. I don't find any file for do that.
Somme info:
EasyPhp 2.0.0.0
     php 5.3.0
     Apache 2.2.13

Thanks
Karim

Hi all,
in answer to sriram above, here we go:

-bash-3.00$ /usr/local/apache2/bin/httpd -V
Server version: Apache/2.2.13 (Unix)
Server built:   Oct  5 2009 10:20:45
Server's Module Magic Number: 20051115:23
Server loaded:  APR 1.3.8, APR-Util 1.3.9
Compiled using: APR 1.3.8, APR-Util 1.3.9
Architecture:   64-bit
Server MPM:     Prefork
  threaded:     no
    forked:     yes (variable process count)
Server compiled with....
 -D APACHE_MPM_DIR="server/mpm/prefork"
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_SYSVSEM_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=128
 -D HTTPD_ROOT="/usr/local/apache2"
 -D SUEXEC_BIN="/usr/local/apache2/bin/suexec"
 -D DEFAULT_PIDLOG="logs/httpd.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_LOCKFILE="logs/accept.lock"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="conf/mime.types"
 -D SERVER_CONFIG_FILE="conf/httpd.conf"

So it is prefork. If ZTS is enabled with --enable-maintainer-zts, then it?s off. Also, from phpinfo(),
Debug Build 	no 
Thread Safety 	disabled 
Zend Memory Manager 	enabled

and it seems USE_ZEND_ALLOC=0 does nothing for me. I?m on CentOS 4.6 on multi-core AMD64, with nearly 1GB RAM and a very busy server. There are plenty of custom systems in this machine, so I can?t tell what is causing it, but it started after we began using Elxis 2009.0 in production state (about 15 hits/second).

My configure lines includes a lot of other parameters, like oci and MySQLi, but if of any use, I?ll compare the relevant items with rrossi?s (bug opener) config.nice:
'./configure' \
'--with-apxs' \ # idem
'--with-mysql=/usr/local/mysql' \ #'--with-mysql=/usr' (CentOS rpm)
'--with-bz2' \ # no
'--with-mcrypt' \ #no
'--with-pgsql' \ #no
'--without-pear' \ # --with-pear

Apache also includes a lot of modules. The most relevant, I guess, are rewrite, proxy (http & ajp), ssl, and cache. If any other info needed, feel free (and please) contact me. It?s been a serious problem down here.

I see this error all the time on my complicated application.  I am using php-fcgi + nginx + mongodb so I am fairly sure it is something in core.

I find that even a small change can fix the problem, output buffering seems to be the culprit for me (ob_end_flush() seems to fix it) which is maybe why people can only reproduce on production servers?

I can confirm, that my apache crashed with the error "zend_mm_heap corrupted" under heavy load. After that I get a lot of Segmentation faults (11).

OS: CentOS 5.4
PHP: 5.2.11 
Apache: 2.2.14

The server is running as a virtual machine in an ESXi 3.5 Server.

I'm now testing the "export USE_ZEND_ALLOC=0" workaround in my apachectl. I'll provide more feedback as soon as I know if this helps.

Adding 
export USE_ZEND_ALLOC=0
to apache2ctl on Ubuntu Hardy worked for me too.

Just for history/logging purposes, I got this same error on PHP 5.2.6 + MySQL 
5.1 + Apache/2.2.4 (Unix) mod_ssl/2.2.4 
OpenSSL/0.9.7a DAV/2 + SuPHP on RHEL 4 today. 

It was related to mysql_* calls, phpinfo() worked fine, no errors. Any mysql_* 
call crashed.


Code:
---------------
[eromero@roll tmp]$ cat /tmp/test.php 
<?php 
echo "Hola";
$link = mysql_connect('localhost', 'mysql_user', 'mysql_password');
if (!$link) {
    die('Could not connect: ' . mysql_error());
}
echo 'Connected successfully';
mysql_close($link);


Reproducing
---------------
[eromero@roll tmp]$ /usr/local/php5-cgi/bin/php-cgi /tmp/test.php 
zend_mm_heap corrupted


Worked fine with USE_ZEND_ALLOC=0 
---------------
[eromero@roll tmp]$ export USE_ZEND_ALLOC=0
[eromero@roll tmp]$ /usr/local/php5-cgi/bin/php-cgi /tmp/test.php 
PHP Warning:  mysql_connect() [<a href='function.mysql-connect'>function.mysql-
connect</a>]: Can't connect to local MySQL 
server through socket '/tmp/mysql.sock' (2) in /tmp/test.php on line 2
X-Powered-By: PHP/5.2.6
Content-type: text/html

HolaCould not connect: Can't connect to local MySQL server through socket 
'/tmp/mysql.sock' (2)



Updating to 5.3.2 fixed the issue.

Here's the config line I used in BOTH 5.2.6 and 5.3.2, everything compiled fine 
both times. Disregard the unused flags:

'./configure' \
'--prefix=/usr/local/php5-cgi' \
'--with-curl' \
'--with-freetype-dir=/usr' \
'--with-png-dir=/usr' \
'--enable-gd-native-ttf' \
'--with-jpeg-dir=/usr' \
'--with-png' \
'--enable-magic-quotes' \
'--enable-sockets' \
'--enable-sysvsem' \
'--enable-sysvshm' \
'--enable-sysvmsg' \
'--enable-track-vars' \
'--enable-trans-sid' \
'--enable-yp' \
'--enable-wddx' \
'--with-pear=/usr/share/pear' \
'--with-kerberos' \
'--with-mysql=/usr/local/mysql' \
'--with-mysqli' \
'--with-pcre-regex' \
'--disable-cli' \
'--enable-cgi' \
'--enable-mbstring' \
'--enable-fastcgi' \
'--enable-force-cgi-redirect' \
'--enable-discard-path' \
'--with-oci8=instantclient,/usr/lib/oracle/11.1.0.1/client/lib' \
'--with-gd' \
'--with-zlib' 


Cheers,
Eduardo Romero
http://foxteck.org

Problem:
----------
I had this problem when importing an xml file with over 4200 items which all needed inserting as individual records into a database.

I was using doctrine to insert the records and was creating a new object for each record, but each time I ran the script it crashed with this error after inserting exactly 3,579 records each time.

 Solution:
-----------
I then decided to try cleaning up the code I had written by using unset() to destroy the object after it had been finished with. All of the records were then inserted without any problems.

I would advise anyone receiving this error to check that variables and objects are being destroyed with unset, because if you think about it the error is telling you that the zend memory managers heap is corrupted.

I had it coming when I started my unittests. But it happened out of nowhere ^^
Wehen I set USE_ZEND_ALLOC=0 it didn't go away, but instead I got a debug backtrace (as seen below). But I came up with a solution: ZendDebugger was the root of all evil. I'll check out if there's a newer version available...

FAILURES!
Tests: 284, Assertions: 1911, Errors: 4, Incomplete: 10, Skipped: 9.
*** glibc detected *** /usr/local/zend/bin/php: free(): invalid pointer: 0x00000000035b5a8f ***
======= Backtrace: =========
/lib/libc.so.6(+0x775b6)[0x7f56f13105b6]
/lib/libc.so.6(cfree+0x73)[0x7f56f1316e53]
/usr/local/zend/bin/php(zend_hash_destroy+0x7b)[0x656b7b]
/usr/local/zend/bin/php(destroy_zend_class+0x55)[0x641845]
/usr/local/zend/bin/php[0x656822]
/usr/local/zend/bin/php(zend_hash_reverse_apply+0x59)[0x656929]
/usr/local/zend/bin/php[0x63e486]
/usr/local/zend/bin/php[0x64a8b2]
/usr/local/zend/bin/php(php_request_shutdown+0x1ae)[0x5f9cce]
/usr/local/zend/bin/php[0x6d2be4]
/lib/libc.so.6(__libc_start_main+0xfd)[0x7f56f12b7c4d]
/usr/local/zend/bin/php[0x45ffaa]
======= Memory map: ========
00400000-009d8000 r-xp 00000000 08:01 12588460                           /usr/local/zend/bin/php
00ad8000-00b5f000 rwxp 005d8000 08:01 12588460                           /usr/local/zend/bin/php
00b5f000-00b7f000 rwxp 00000000 00:00 0 
02b4e000-04999000 rwxp 00000000 00:00 0                                  [heap]
7f56e0000000-7f56e0021000 rwxp 00000000 00:00 0 
7f56e0021000-7f56e4000000 ---p 00000000 00:00 0 
7f56e5309000-7f56e530e000 r-xp 00000000 08:01 15842                      /lib/libnss_dns-2.11.1.so
7f56e530e000-7f56e550d000 ---p 00005000 08:01 15842                      /lib/libnss_dns-2.11.1.so
7f56e550d000-7f56e550e000 r-xp 00004000 08:01 15842                      /lib/libnss_dns-2.11.1.so
7f56e550e000-7f56e550f000 rwxp 00005000 08:01 15842                      /lib/libnss_dns-2.11.1.so
7f56e550f000-7f56e5511000 r-xp 00000000 08:01 41397                      /lib/libnss_mdns4_minimal.so.2
7f56e5511000-7f56e5710000 ---p 00002000 08:01 41397                      /lib/libnss_mdns4_minimal.so.2
7f56e5710000-7f56e5711000 r-xp 00001000 08:01 41397                      /lib/libnss_mdns4_minimal.so.2
7f56e5711000-7f56e5712000 rwxp 00002000 08:01 41397                      /lib/libnss_mdns4_minimal.so.2
7f56e5712000-7f56e5714000 rwxp 00000000 00:00 0 
7f56e5794000-7f56e58f7000 r-xp 00000000 08:01 12582939                   /usr/local/zend/lib/debugger/php-5.3.x/ZendDebugger.so
7f56e58f7000-7f56e59f7000 ---p 00163000 08:01 12582939                   /usr/local/zend/lib/debugger/php-5.3.x/ZendDebugger.so
7f56e59f7000-7f56e5a21000 rwxp 00163000 08:01 12582939                   /usr/local/zend/lib/debugger/php-5.3.x/ZendDebugger.so
7f56e5a21000-7f56e5a27000 rwxp 00000000 00:00 0 
7f56e5a27000-7f56e5a69000 r-xp 00000000 08:01 12583569                   /usr/local/zend/lib/optimizerplus/php-5.3.x/ZendOptimizerPlus.so
7f56e5a69000-7f56e5b69000 ---p 00042000 08:01 12583569                   /usr/local/zend/lib/optimizerplus/php-5.3.x/ZendOptimizerPlus.so
7f56e5b69000-7f56e5b6b000 rwxp 00042000 08:01 12583569                   /usr/local/zend/lib/optimizerplus/php-5.3.x/ZendOptimizerPlus.so
7f56e5b6b000-7f56e5b76000 rwxp 00000000 00:00 0 
7f56e5b76000-7f56e5cd3000 r-xp 00000000 08:01 12583576                   /usr/local/zend/lib/utils/php-5.3.x/ZendUtils.so
7f56e5cd3000-7f56e5dd3000 ---p 0015d000 08:01 12583576                   /usr/local/zend/lib/utils/php-5.3.x/ZendUtils.so
7f56e5dd3000-7f56e5ddb000 rwxp 0015d000 08:01 12583576                   /usr/local/zend/lib/utils/php-5.3.x/ZendUtils.so
7f56e5ddb000-7f56e5dde000 rwxp 00000000 00:00 0 
7f56e5dde000-7f56e5f50000 r-xp 00000000 08:01 12583528                   /usr/local/zend/lib/datacache/php-5.3.x/ZendDataCache.so
7f56e5f50000-7f56e604f000 ---p 00172000 08:01 12583528                   /usr/local/zend/lib/datacache/php-5.3.x/ZendDataCache.so
7f56e604f000-7f56e6058000 rwxp 00171000 08:01 12583528                   /usr/local/zend/lib/datacache/php-5.3.x/ZendDataCache.so
7f56e6058000-7f56e605b000 rwxp 00000000 00:00 0 
7f56e605b000-7f56e605e000 r-xp 00000000 08:01 537567                     /usr/lib/gconv/UTF-16.so
7f56e605e000-7f56e625d000 ---p 00003000 08:01 537567                     /usr/lib/gconv/UTF-16.so
7f56e625d000-7f56e625e000 r-xp 00002000 08:01 537567                     /usr/lib/gconv/UTF-16.so
7f56e625e000-7f56e625f000 rwxp 00003000 08:01 537567                     /usr/lib/gconv/UTF-16.so
7f56e625f000-7f56e6269000 r-xp 00000000 08:01 15845                      /lib/libnss_nis-2.11.1.so
7f56e6269000-7f56e6468000 ---p 0000a000 08:01 15845                      /lib/libnss_nis-2.11.1.so
7f56e6468000-7f56e6469000 r-xp 00009000 08:01 15845                      /lib/libnss_nis-2.11.1.so
7f56e6469000-7f56e646a000 rwxp 0000a000 08:01 15845                      /lib/libnss_nis-2.11.1.so
7f56e646a000-7f56e6472000 r-xp 00000000 08:01 15841                      /lib/libnss_compat-2.11.1.so
7f56e6472000-7f56e6671000 ---p 00008000 08:01 15841                      /lib/libnss_compat-2.11.1.so
7f56e6671000-7f56e6672000 r-xp 00007000 08:01 15841                      /lib/libnss_compat-2.11.1.so
7f56e6672000-7f56e6673000 rwxp 00008000 08:01 15841                      /lib/libnss_compat-2.11.1.so
7f56e6673000-7f56e6b9c000 r-xp 00000000 08:01 36700                      /usr/lib/libociicus.so
7f56e6b9c000-7f56e6c9b000 ---p 00529000 08:01 36700                      /usr/lib/libociicus.so
7f56e6c9b000-7f56e6c9c000 rwxp 00528000 08:01 36700                      /usr/lib/libociicus.so
7f56e6c9c000-7f56e6cbf000 rwxp 00000000 00:00 0 
7f56e6cbf000-7f56e6ccb000 r-xp 00000000 08:01 15843                      /lib/libnss_files-2.11.1.so
7f56e6ccb000-7f56e6eca000 ---p 0000c000 08:01 15843                      /lib/libnss_files-2.11.1.so
7f56e6eca000-7f56e6ecb000 r-xp 0000b000 08:01 15843                      /lib/libnss_files-2.11.1.so
7f56e6ecb000-7f56e6ecc000 rwxp 0000c000 08:01 15843                      /lib/libnss_files-2.11.1.so
7f56e6ecc000-7f56e6ede000 r-xp 00000000 08:01 12583643                   /usr/local/zend/lib/php_extensions/zip.so
7f56e6ede000-7f56e6fde000 ---p 00012000 08:01 12583643                   /usr/local/zend/lib/php_extensions/zip.so
7f56e6fde000-7f56e6fe0000 rwxp 00012000 08:01 12583643                   /usr/local/zend/lib/php_extensions/zip.so
7f56e6fe0000-7f56e702a000 r-xp 00000000 08:01 12583581                   /usr/local/zend/lib/php_extensions/xsl.so
7f56e702a000-7f56e712a000 ---p 0004a000 08:01 12583581                   /usr/local/zend/lib/php_extensions/xsl.so
7f56e712a000-7f56e712c000 rwxp 0004a000 08:01 12583581                   /usr/local/zend/lib/php_extensions/xsl.so
7f56e712c000-7f56e7264000 r-xp 00000000 08:01 12583656                   /usr/local/zend/lib/php_extensions/xmlwriter.so
7f56e7264000-7f56e7364000 ---p 00138000 08:01 12583656                   /usr/local/zend/lib/php_extensions/xmlwriter.so
7f56e7364000-7f56e7372000 rwxp 00138000 08:01 12583656                   /usr/local/zend/lib/php_extensions/xmlwriter.so

The problem is still in 5.3.3 on Suse 11.2, but it is not reproducible :-(
Sometimes it is twice a day sometimes every few days.

Apache starts giving these messages:
"child pid xxxxx exit signal Segmentation fault (11)"
And if your are lucky, the scripts still return xml-results.
If you get a no result from the script (i.a. white page in browser),
you'll need a apache stop and start (graceful does not help)
and the error_log says:
"seg fault or similar nasty error detected in the parent process"

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.

The cause is pretty clear to me: when the script ends, the garbage collector starts to destroy the objects and the `unset()` in the destructor probably invokes the garbage collector again. The error message doesn't always appear on the screen nor in the error log (sometimes it does). The "Segmentation fault" always appears in the error log. Breaks if PHP is installed using apt-get or yum or comes with your Linux distro. Seems to work fine on Windows and codepads (custom compiled PHPs). Definitely breaks on Debian. Don't forget to set memory_limit to have enough room in memory to create all the objects (128M seems to be enough on Debian to create 150,000 objects).

<?php
define('OBJECT_COUNT', 20 * 1000);

class Object {
    private static $world = array();
    private static $maxGuid = 0;
    protected $_guid = null;
    public function __construct() {
         self::$world[$this->_guid = self::$maxGuid++] = $this;
    }
    public function __destruct() {
         unset(self::$world[$this->_guid]);
    }
}

for ($i = 0; $i < OBJECT_COUNT; ++$i) {
    new Object();
}

// You probably won't see this because of the "zend_mm_heap corrupted"
echo 'If you see this, try to increase OBJECT_COUNT to 100,000';
?>

If this code pinpoints the four and a half years-old issue, email me a beer.
Florin Ardelian

I must agree with Florin, we are experiencing the same kinds of issues, both with 
CLI and mod_php, su_php and across 5.2.* and 5.3.*. We really need this to be 
fixed. Any updates?

Second this by running code, provided by "f dot ardelian at gmail dot com" at 2011-08-31 07:49 UTC:

# php -q zend_mm_heap_corrupted.php
If you see this, try to increase OBJECT_COUNT to 100,000zend_mm_heap corrupted

# php --version
PHP 5.3.8 (cli) (built: Aug 29 2011 14:48:33)
Copyright (c) 1997-2011 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2011 Zend Technologies
    with eAccelerator v0.9.6.1, Copyright (c) 2004-2010 eAccelerator, by eAccelerator
    with Xdebug v2.1.2, Copyright (c) 2002-2011, by Derick Rethans

I can also reproduce with script from 'f dot ardelian at gmail dot com' this error on:

php --version
PHP 5.3.8-pl0-gentoo (cli) (built: Oct  4 2011 10:42:38) 
Copyright (c) 1997-2011 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2011 Zend Technologies

problem solved by compiling apache with prefork. Somehow Apache worker MPM + PHP 5.2 works fine but Apache worker MPM + PHP 5.3 fails terribly. Prefork seems stable

I can reproduce the bug on Microsoft Windows XP SP3, with latest official PHP 5.3.8 NTS build.

When we run script from "f dot ardelian at gmail dot com", PHP does not output "zend_mm_heap corrupted", but right after displaying the "If you see this…" line CRASHES.

However, I found that when I call "gc_disable();" before script end, it finishes successfully. This helped me run the test script without problems, but didn't solve the issue in my other scripts.

<?
define('OBJECT_COUNT', 100 * 1000 * 10);

class Object {
    private static $world = array();
    private static $maxGuid = 0;
    protected $_guid = null;
    public function __construct() {
         self::$world[$this->_guid = self::$maxGuid++] = $this;
    }
    public function __destruct() {
         unset(self::$world[$this->_guid]);
    }
}

for ($i = 0; $i < OBJECT_COUNT; ++$i) {
    new Object();
}

// You probably won't see this because of the "zend_mm_heap corrupted"
echo 'If you see this, try to increase OBJECT_COUNT to 100,000';

gc_disable(); // ADDED - works for me - PHP does not crash
?>

Hello, I use Wordpress. I am hosted in home.pl which uses IdeaWebServer instead 
of Apache. Very often when I enable whatever cache plugin I get the 
"zend_mm_heap corrupted" error.

I have also a hosting in the USA with Apache and the same PHP and MySql 
versions. If I backup both data and database and restore it in the Apache server 
I can use my caching plugins without issues because the "zend_mm_heap corrupted" 
error never appears.

Home.pl says that this is a PHP issue and it is not connected with their non-
Apache server.

What's your opinion in that? Is it a PHP issue or a hosting issue?
Thank you

"f dot ardelian at gmail dot com" test case works on php 5.4rc2, too (php 
cli segfaults)

Just had the same issue, but 100% reproducible. It does not always print 
zend_mm_heap corrupted, but it always segfaults PHP.

I've traced it to an equivalent of the following two lines of code:

  $xx = new stdClass;
  strpos($xx, ':');

Moreover, this only crashes inside a custom error handler function. If I disable 
set_error_handler call, the crash disappears. The crash inside the error handler 
is on a pretty innocent operation, and the location is not stable (most often it 
crashes on assigning a large literal array to a static variable).

I tried to produce a smaller test case which reproduces the crash, but failed. 
Some magic dust is always missing.

However, this gives us an alternative theory why most people may only be seeing 
this in production and rarely: they may only be running a custom error handler in 
production, and they may have a rare critical error somewhere which can trigger 
it. Try disabling your error handler and see.

I have just run into the same problems after upgrading from 5.2.17 
to 5.3.10 last weekend. Hosted on Debian server. Before I found this 
bug report, I created another one:
https://bugs.php.net/bug.php?id=61508
, which now seems to be a duplicate of this one.

It is true I have a loaded server with many extensions and many 
users with their own apps, so this seems not to be possible for me 
to check all their code or to downgrade to unsupported 5.2 branch.

Hi,
I used the USE_ZEND_ALLOC=0 and got another segfault. But in this case in the apache error log is hopefuly something useful:


*** glibc detected *** /usr/local/apache2/bin/httpd: double free or corruption (!prev): 0x00000000051d6e10 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f5a8e3709a8]
/lib/libc.so.6(cfree+0x76)[0x7f5a8e372ab6]
/usr/local/apache2/modules/libphp5.so(zend_multibyte_read_script+0x2e)[0x7f5a887be90e]
/usr/local/apache2/modules/libphp5.so(open_file_for_scanning+0x90)[0x7f5a887bed60]
/usr/local/apache2/modules/libphp5.so(compile_file+0x9c)[0x7f5a887bf92c]
/usr/local/apache2/modules/libphp5.so[0x7f5a8866575a]
/usr/local/apache2/modules/libphp5.so[0x7f5a8881c733]
/usr/local/apache2/modules/libphp5.so(execute+0x209)[0x7f5a88813c49]
/usr/local/apache2/modules/libphp5.so(zend_execute_scripts+0x17b)[0x7f5a887e52db]
/usr/local/apache2/modules/libphp5.so(php_execute_script+0x198)[0x7f5a8878e0f8]
/usr/local/apache2/modules/libphp5.so[0x7f5a8887348f]
/usr/local/apache2/bin/httpd(ap_run_handler+0x4a)[0x443f5a]
/usr/local/apache2/bin/httpd(ap_invoke_handler+0xce)[0x44747e]
/usr/local/apache2/bin/httpd(ap_process_request+0x18e)[0x465ece]
/usr/local/apache2/bin/httpd[0x462d78]
/usr/local/apache2/bin/httpd(ap_run_process_connection+0x4a)[0x44b45a]
/usr/local/apache2/bin/httpd[0x46abd0]
/usr/local/apache2/bin/httpd[0x46aea4]
/usr/local/apache2/bin/httpd(ap_mpm_run+0xbde)[0x46baee]
/usr/local/apache2/bin/httpd(main+0x99a)[0x43063a]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f5a8e31b1a6]
/usr/local/apache2/bin/httpd(apr_os_proc_mutex_put+0x49)[0x42f819]
======= Memory map: ========
00400000-00493000 r-xp 00000000 08:01 442565                             /usr/local/apache2/bin/httpd
00692000-00698000 rw-p 00092000 08:01 442565                             /usr/local/apache2/bin/httpd
00698000-0069d000 rw-p 00698000 00:00 0 
017e0000-053d4000 rw-p 017e0000 00:00 0                                  [heap]
7f5a80000000-7f5a80021000 rw-p 7f5a80000000 00:00 0 
7f5a80021000-7f5a84000000 ---p 7f5a80021000 00:00 0 
7f5a8497c000-7f5a84992000 r-xp 00000000 08:01 835587                     /lib/libgcc_s.so.1
7f5a84992000-7f5a84b92000 ---p 00016000 08:01 835587                     /lib/libgcc_s.so.1
7f5a84b92000-7f5a84b93000 rw-p 00016000 08:01 835587                     /lib/libgcc_s.so.1
7f5a84b9d000-7f5a84b9e000 r--s 00000000 08:11 78792612                   /home/apache2/htdocs/horde/lib/core.php
7f5a84b9e000-7f5a84bc1000 r--p 00000000 08:11 78799575                   /home/apache2/htdocs/horde/mnemo/locale/cs_CZ/LC_MESSAGES/mnemo.mo
7f5a84bc1000-7f5a84bc5000 r-xp 00000000 08:01 1884172                    /lib/libnss_dns-2.7.so
7f5a84bc5000-7f5a84dc4000 ---p 00004000 08:01 1884172                    /lib/libnss_dns-2.7.so
7f5a84dc4000-7f5a84dc6000 rw-p 00003000 08:01 1884172                    /lib/libnss_dns-2.7.so
7f5a84dc6000-7f5a84dfd000 r--p 00000000 08:11 78790850                   /home/apache2/htdocs/horde/imp/locale/cs_CZ/LC_MESSAGES/imp.mo
7f5a84dfd000-7f5a84dff000 r-xp 00000000 08:01 1327349                    /usr/lib/gconv/ISO8859-2.so
7f5a84dff000-7f5a84ffe000 ---p 00002000 08:01 1327349                    /usr/lib/gconv/ISO8859-2.so
7f5a84ffe000-7f5a85000000 rw-p 00001000 08:01 1327349                    /usr/lib/gconv/ISO8859-2.so
7f5a85000000-7f5a85192000 r--p 00000000 08:01 428099                     /usr/lib/locale/locale-archive
7f5a85192000-7f5a851e1000 rw-p 7f5a85192000 00:00 0 
7f5a851e1000-7f5a851e3000 r-xp 00000000 08:01 451017                     /usr/local/apache2/lib/apr-util-1/apr_ldap-1.so
7f5a851e3000-7f5a853e2000 ---p 00002000 08:01 451017                     /usr/local/apache2/lib/apr-util-1/apr_ldap-1.so
7f5a853e2000-7f5a853e3000 rw-p 00001000 08:01 451017                     /usr/local/apache2/lib/apr-util-1/apr_ldap-1.so
7f5a853e3000-7f5a853ed000 r-xp 00000000 08:01 1884173                    /lib/libnss_files-2.7.so
7f5a853ed000-7f5a855ed000 ---p 0000a000 08:01 1884173                    /lib/libnss_files-2.7.so
7f5a855ed000-7f5a855ef000 rw-p 0000a000 08:01 1884173                    /lib/libnss_files-2.7.so
7f5a855ef000-7f5a855f8000 r-xp 00000000 08:01 1884175                    /lib/libnss_nis-2.7.so
7f5a855f8000-7f5a857f8000 ---p 00009000 08:01 1884175                    /lib/libnss_nis-2.7.so
7f5a857f8000-7f5a857fa000 rw-p 00009000 08:01 1884175                    /lib/libnss_nis-2.7.so
7f5a857fa000-7f5a85801000 r-xp 00000000 08:01 1884171                    /lib/libnss_compat-2.7.so
7f5a85801000-7f5a85a00000 ---p 00007000 08:01 1884171                    /lib/libnss_compat-2.7.so
7f5a85a00000-7f5a85a02000 rw-p 00006000 08:01 1884171                    /lib/libnss_compat-2.7.so
7f5a85a02000-7f5a85a07000 r-xp 00000000 08:01 415349                     /usr/lib/libXdmcp.so.6.0.0
7f5a85a07000-7f5a85c06000 ---p 00005000 08:01 415349                     /usr/lib/libXdmcp.so.6.0.0
7f5a85c06000-7f5a85c07000 rw-p 00004000 08:01 415349                     /usr/lib/libXdmcp.so.6.0.0
7f5a85c07000-7f5a85c09000 r-xp 00000000 08:01 415347                     /usr/lib/libXau.so.6.0.0
7f5a85c09000-7f5a85e08000 ---p 00002000 08:01 415347                     /usr/lib/libXau.so.6.0.0
7f5a85e08000-7f5a85e09000 rw-p 00001000 08:01 415347                     /usr/lib/libXau.so.6.0.0
7f5a85e09000-7f5a85e24000 r-xp 00000000 08:01 415351                     /usr/lib/libxcb.so.1.0.0
7f5a85e24000-7f5a86024000 ---p 0001b000 08:01 415351                     /usr/lib/libxcb.so.1.0.0
7f5a86024000-7f5a86025000 rw-p 0001b000 08:01 415351                     /usr/lib/libxcb.so.1.0.0
7f5a86025000-7f5a86026000 r-xp 00000000 08:01 415353                     /usr/lib/libxcb-xlib.so.0.0.0
7f5a86026000-7f5a86225000 ---p 00001000 08:01 415353                     /usr/lib/libxcb-xlib.so.0.0.0
7f5a86225000-7f5a86226000 rw-p 00000000 08:01 415353                     /usr/lib/libxcb-xlib.so.0.0.0
7f5a86226000-7f5a86378000 r-xp 00000000 08:01 410736                     /usr/lib/libxml2.so.2.6.32
7f5a86378000-7f5a86577000 ---p 00152000 08:01 410736                     /usr/lib/libxml2.so.2.6.32
7f5a86577000-7f5a86581000 rw-p 00151000 08:01 410736                     /usr/lib/libxml2.so.2.6.32
7f5a86581000-7f5a86582000 rw-p 7f5a86581000 00:00 0 
7f5a86582000-7f5a865bb000 r-xp 00000000 08:01 811278                     /usr/lib/libxslt.so.1.1.24
7f5a865bb000-7f5a867ba000 ---p 00039000 08:01 811278                     /usr/lib/libxslt.so.1.1.24
7f5a867ba000-7f5a867bc000 rw-p 00038000 08:01 811278                     /usr/lib/libxslt.so.1.1.24
7f5a867bc000-7f5a86816000 r-xp 00000000 08:01 419699                     /usr/local/lib/libcurl.so.4.2.0
7f5a86816000-7f5a86a16000 ---p 0005a000 08:01 419699                     /usr/local/lib/libcurl.so.4.2.0
7f5a86a16000-7f5a86a19000 rw-p 0005a000 08:01 419699                     /usr/local/lib/libcurl.so.4.2.0
7f5a86a19000-7f5a86a2e000 r-xp 00000000 08:01 1884170                    /lib/libnsl-2.7.so
7f5a86a2e000-7f5a86c2d000 ---p 00015000 08:01 1884170                    /lib/libnsl-2.7.so
7f5a86c2d000-7f5a86c2f000 rw-p 00014000 08:01 1884170                    /lib/libnsl-2.7.so
7f5a86c2f000-7f5a86c31000 rw-p 7f5a86c2f000 00:00 0 
7f5a86c31000-7f5a86c40000 r-xp 00000000 08:01 835606                     /lib/libbz2.so.1.0.4
7f5a86c40000-7f5a86e3f000 ---p 0000f000 08:01 835606                     /lib/libbz2.so.1.0.4
7f5a86e3f000-7f5a86e41000 rw-p 0000e000 08:01 835606                     /lib/libbz2.so.1.0.4
7f5a86e41000-7f5a86e62000 r-xp 00000000 08:01 414949                     /usr/lib/libjpeg.so.62.0.0
7f5a86e62000-7f5a87062000 ---p 00021000 08:01 414949                     /usr/lib/libjpeg.so.62.0.0
7f5a87062000-7f5a87063000 rw-p 00021000 08:01 414949                     /usr/lib/libjpeg.so.62.0.0
7f5a87063000-7f5a87088000 r-xp 00000000 08:01 414393                     /usr/lib/libpng12.so.0.27.0
7f5a87088000-7f5a87287000 ---p 00025000 08:01 414393                     /usr/lib/libpng12.so.0.27.0
7f5a87287000-7f5a87288000 rw-p 00024000 08:01 414393                     /usr/lib/libpng12.so.0.27.0
7f5a87288000-7f5a87298000 r-xp 00000000 08:01 811014                     /usr/lib/libXpm.so.4.11.0
7f5a87298000-7f5a87498000 ---p 00010000 08:01 811014                     /usr/lib/libXpm.so.4.11.0
7f5a87498000-7f5a87499000 rw-p 00010000 08:01 811014                     /usr/lib/libXpm.so.4.11.0
7f5a87499000-7f5a8759f000 r-xp 00000000 08:01 415355                     /usr/lib/libX11.so.6.2.0
7f5a8759f000-7f5a8779f000 ---p 00106000 08:01 415355                     /usr/lib/libX11.so.6.2.0
7f5a8779f000-7f5a877a5000 rw-p 00106000 08:01 415355                     /usr/lib/libX11.so.6.2.0
7f5a877a5000-7f5a87824000 r-xp 00000000 08:01 412300                     /usr/lib/libfreetype.so.6.3.18
7f5a87824000-7f5a87a23000 ---p 0007f000 08:01 412300                     /usr/lib/libfreetype.so.6.3.18
7f5a87a23000-7f5a87a29000 rw-p 0007e000 08:01 412300                     /usr/lib/libfreetype.so.6.3.18
7f5a87a29000-7f5a87a90000 r-xp 00000000 08:01 1679409                    /usr/local/lib/libgmp.so.10.0.4
7f5a87a90000-7f5a87c8f000 ---p 00067000 08:01 1679409                    /usr/local/lib/libgmp.so.10.0.4
7f5a87c8f000-7f5a87c98000 rw-p 00066000 08:01 1679409                    /usr/local/lib/libgmp.so.10.0.4
7f5a87c98000-7f5a87ca3000 r-xp 00000000 08:01 835643                     /lib/libpam.so.0.81.12
7f5a87ca3000-7f5a87ea2000 ---p 0000b000 08:01 835643                     /lib/libpam.so.0.81.12
7f5a87ea2000-7f5a87ea3000 rw-p 0000a000 08:01 835643                     /lib/libpam.so.0.81.12
7f5a87ea3000-7f5a87eac000 r-xp 00000000 08:01 418505                     /usr/local/lib/libltdl.so.7.3.0
7f5a87eac000-7f5a880ab000 ---p 00009000 08:01 418505                     /usr/local/lib/libltdl.so.7.3.0
7f5a880ab000-7f5a880ac000 rw-p 00008000 08:01 418505                     /usr/local/lib/libltdl.so.7.3.0
7f5a880ac000-7f5a880d3000 r-xp 00000000 08:01 416131                     /usr/lib/libmcrypt.so.4.4.7
7f5a880d3000-7f5a881d3000 ---p 00027000 08:01 416131                     /usr/lib/libmcrypt.so.4.4.7
7f5a881d3000-7f5a881d7000 rw-p 00027000 08:01 416131                     /usr/lib/libmcrypt.so.4.4.7
7f5a881d7000-7f5a881dc000 rw-p 7f5a881d7000 00:00 0 
7f5a881dc000-7f5a881ef000 r-xp 00000000 08:01 811277                     /usr/lib/libexslt.so.0.8.13
7f5a881ef000-7f5a883ee000 ---p 00013000 08:01 811277                     /usr/lib/libexslt.so.0.8.13
7f5a883ee000-7f5a883ef000 rw-p 00012000 08:01 811277                     /usr/lib/libexslt.so.0.8.13
7f5a883ef000-7f5a88dd8000 r-xp 00000000 08:01 451990                     /usr/local/apache2/modules/libphp5.so
7f5a88dd8000-7f5a88fd7000 ---p 009e9000 08:01 451990                     /usr/local/apache2/modules/libphp5.so
7f5a88fd7000-7f5a8906b000 rw-p 009e8000 08:01 451990                     /usr/local/apache2/modules/libphp5.so
7f5a8906b000-7f5a8908e000 rw-p 7f5a8906b000 00:00 0 
7f5a8908e000-7f5a89095000 r-xp 00000000 08:01 451065                     /usr/local/apache2/modules/mod_proxy_http.so
7f5a89095000-7f5a89295000 ---p 00007000 08:01 451065                     /usr/local/apache2/modules/mod_proxy_http.so
7f5a89295000-7f5a89296000 rw-p 00007000 08:01 451065                     /usr/local/apache2/modules/mod_proxy_http.so
7f5a89296000-7f5a892a9000 r-xp 00000000 08:01 451062                     /usr/local/apache2/modules/mod_proxy.so
7f5a892a9000-7f5a894a9000 ---p 00013000 08:01 451062                     /usr/local/apache2/modules/mod_proxy.so
7f5a894a9000-7f5a894aa000 rw-p 00013000 08:01 451062                     /usr/local/apache2/modules/mod_proxy.so
7f5a894aa000-7f5a894b8000 r-xp 00000000 08:01 451085                     /usr/local/apache2/modules/mod_rewrite.so
7f5a894b8000-7f5a896b8000 ---p 0000e000 08:01 451085                     /usr/local/apache2/modules/mod_rewrite.so
7f5a896b8000-7f5a896b9000 rw-p 0000e000 08:01 451085                     /usr/local/apache2/modules/mod_rewrite.so
7f5a896b9000-7f5a896be000 r-xp 00000000 08:01 451047                     /usr/local/apache2/modules/mod_deflate.so
7f5a896be000-7f5a898bd000 ---p 00005000 08:01 451047                     /usr/local/apache2/modules/mod_deflate.so
7f5a898bd000-7f5a898be000 rw-p 00004000 08:01 451047                     /usr/local/apache2/modules/mod_deflate.so
7f5a898be000-7f5a898c1000 r-xp 00000000 08:01 451084                     /usr/local/apache2/modules/mod_alias.so
7f5a898c1000-7f5a89ac0000 ---p 00003000 08:01 451084                     /usr/local/apache2/modules/mod_alias.so
7f5a89ac0000-7f5a89ac1000 rw-p 00002000 08:01 451084                     /usr/local/apache2/modules/mod_alias.so
7f5a89ac1000-7f5a89ac3000 r-xp 00000000 08:01 451083                     /usr/local/apache2/modules/mod_userdir.so
7f5a89ac3000-7f5a89cc2000 ---p 00002000 08:01 451083                     /usr/local/apache2/modules/mod_userdir.so
7f5a89cc2000-7f5a89cc3000 rw-p 00001000 08:01 451083                     /usr/local/apache2/modules/mod_userdir.so
7f5a89cc3000-7f5a89cc6000 r-xp 00000000 08:01 451080                     /usr/local/apache2/modules/mod_imagemap.so
7f5a89cc6000-7f5a89ec5000 ---p 00003000 08:01 451080                     /usr/local/apache2/modules/mod_imagemap.so
7f5a89ec5000-7f5a89ec6000 rw-p 00002000 08:01 451080                     /usr/local/apache2/modules/mod_imagemap.so
7f5a89ec6000-7f5a89ec8000 r-xp 00000000 08:01 451079                     /usr/local/apache2/modules/mod_dir.so
7f5a89ec8000-7f5a8a0c7000 ---p 00002000 08:01 451079                     /usr/local/apache2/modules/mod_dir.so
7f5a8a0c7000-7f5a8a0c8000 rw-p 00001000 08:01 451079                     /usr/local/apache2/modules/mod_dir.so
7f5a8a0c8000-7f5a8a0cf000 r-xp 00000000 08:01 451078                     /usr/local/apache2/modules/mod_negotiation.so
7f5a8a0cf000-7f5a8a2cf000 ---p 00007000 08:01 451078                     /usr/local/apache2/modules/mod_negotiation.so
7f5a8a2cf000-7f5a8a2d0000 rw-p 00007000 08:01 451078                     /usr/local/apache2/modules/mod_negotiation.so
7f5a8a2d0000-7f5a8a2d2000 r-xp 00000000 08:01 451077                     /usr/local/apache2/modules/mod_vhost_alias.so
7f5a8a2d2000-7f5a8a4d1000 ---p 00002000 08:01 451077                     /usr/local/apache2/modules/mod_vhost_alias.so
7f5a8a4d1000-7f5a8a4d2000 rw-p 00001000 08:01 451077                     /usr/local/apache2/modules/mod_vhost_alias.so
7f5a8a4d2000-7f5a8a4d7000 r-xp 00000000 08:01 451075                     /usr/local/apache2/modules/mod_cgi.so
7f5a8a4d7000-7f5a8a6d7000 ---p 00005000 08:01 451075                     /usr/local/apache2/modules/mod_cgi.so
7f5a8a6d7000-7f5a8a6d8000 rw-p 00005000 08:01 451075                     /usr/local/apache2/modules/mod_cgi.so
7f5a8a6d8000-7f5a8a6dc000 r-xp 00000000 08:01 451074                     /usr/local/apache2/modules/mod_info.so
7f5a8a6dc000-7f5a8a8dc000 ---p 00004000 08:01 451074                     /usr/local/apache2/modules/mod_info.so
7f5a8a8dc000-7f5a8a8dd000 rw-p 00004000 08:01 451074                     /usr/local/apache2/modules/mod_info.so
7f5a8a8dd000-7f5a8a8de000 r-xp 00000000 08:01 451073                     /usr/local/apache2/modules/mod_asis.so
7f5a8a8de000-7f5a8aade000 ---p 00001000 08:01 451073                     /usr/local/apache2/modules/mod_asis.so
7f5a8aade000-7f5a8aadf000 rw-p 00001000 08:01 451073                     /usr/local/apache2/modules/mod_asis.so
7f5a8aadf000-7f5a8aae7000 r-xp 00000000 08:01 451072                     /usr/local/apache2/modules/mod_autoindex.so
7f5a8aae7000-7f5a8ace6000 ---p 00008000 08:01 451072                     /usr/local/apache2/modules/mod_autoindex.so
7f5a8ace6000-7f5a8ace7000 rw-p 00007000 08:01 451072                     /usr/local/apache2/modules/mod_autoindex.so
7f5a8ace7000-7f5a8aceb000 r-xp 00000000 08:01 451071                     /usr/local/apache2/modules/mod_status.so
7f5a8aceb000-7f5a8aeeb000 ---p 00004000 08:01 451071                     /usr/local/apache2/modules/mod_status.so
7f5a8aeeb000-7f5a8aeec000 rw-p 00004000 08:01 451071                     /usr/local/apache2/modules/mod_status.so
7f5a8aeec000-7f5a8aef0000 r-xp 00000000 08:01 451069                     /usr/local/apache2/modules/mod_mime.so
7f5a8aef0000-7f5a8b0ef000 ---p 00004000 08:01 451069                     /usr/local/apache2/modules/mod_mime.so
7f5a8b0ef000-7f5a8b0f0000 rw-p 00003000 08:01 451069                     /usr/local/apache2/modules/mod_mime.so
7f5a8b0f0000-7f5a8b0f2000 r-xp 00000000 08:01 451060                     /usr/local/apache2/modules/mod_setenvif.so
7f5a8b0f2000-7f5a8b2f2000 ---p 00002000 08:01 451060                     /usr/local/apache2/modules/mod_setenvif.so
7f5a8b2f2000-7f5a8b2f3000 rw-p 00002000 08:01 451060                     /usr/local/apache2/modules/mod_setenvif.so
7f5a8b2f3000-7f5a8b2f5000 r-xp 00000000 08:01 451059                     /usr/local/apache2/modules/mod_unique_id.so
7f5a8b2f5000-7f5a8b4f4000 ---p 00002000 08:01 451059                     /usr/local/apache2/modules/mod_unique_id.so
7f5a8b4f4000-7f5a8b4f5000 rw-p 00001000 08:01 451059                     /usr/local/apache2/modules/mod_unique_id.so
7f5a8b4f5000-7f5a8b4f9000 r-xp 00000000 08:01 451056                     /usr/local/apache2/modules/mod_headers.so
7f5a8b4f9000-7f5a8b6f8000 ---p 00004000 08:01 451056                     /usr/local/apache2/modules/mod_headers.so
7f5a8b6f8000-7f5a8b6f9000 rw-p 00003000 08:01 451056                     /usr/local/apache2/modules/mod_headers.so
7f5a8b6f9000-7f5a8b6fb000 r-xp 00000000 08:01 451055                     /usr/local/apache2/modules/mod_expires.so
7f5a8b6fb000-7f5a8b8fb000 ---p 00002000 08:01 451055                     /usr/local/apache2/modules/mod_expires.so
7f5a8b8fb000-7f5a8b8fc000 rw-p 00002000 08:01 451055                     /usr/local/apache2/modules/mod_expires.so
7f5a8b8fc000-7f5a8b901000 r-xp 00000000 08:01 451053                     /usr/local/apache2/modules/mod_mime_magic.so
7f5a8b901000-7f5a8bb01000 ---p 00005000 08:01 451053                     /usr/local/apache2/modules/mod_mime_magic.so
7f5a8bb01000-7f5a8bb02000 rw-p 00005000 08:01 451053                     /usr/local/apache2/modules/mod_mime_magic.so
7f5a8bb02000-7f5a8bb04000 r-xp 00000000 08:01 451052                     /usr/local/apache2/modules/mod_env.so
7f5a8bb04000-7f5a8bd03000 ---p 00002000 08:01 451052                     /usr/local/apache2/modules/mod_env.so
7f5a8bd03000-7f5a8bd04000 rw-p 00001000 08:01 451052                     /usr/local/apache2/modules/mod_env.so
7f5a8bd04000-7f5a8bd09000 r-xp 00000000 08:01 451049                     /usr/local/apache2/modules/mod_log_config.so
7f5a8bd09000-7f5a8bf09000 ---p 00005000 08:01 451049                     /usr/local/apache2/modules/mod_log_config.so
7f5a8bf09000-7f5a8bf0a000 rw-p 00005000 08:01 451049                     /usr/local/apache2/modules/mod_log_config.so
7f5a8bf0a000-7f5a8bf14000 r-xp 00000000 08:01 451042                     /usr/local/apache2/modules/mod_include.so
7f5a8bf14000-7f5a8c113000 ---p 0000a000 08:01 451042                     /usr/local/apache2/modules/mod_include.so
7f5a8c113000-7f5a8c114000 rw-p 00009000 08:01 451042                     /usr/local/apache2/modules/mod_include.so
7f5a8c114000-7f5a8c11a000 r-xp 00000000 08:01 451035                     /usr/local/apache2/modules/mod_auth_digest.so
7f5a8c11a000-7f5a8c31a000 ---p 00006000 08:01 451035                     /usr/local/apache2/modules/mod_auth_digest.so
7f5a8c31a000-7f5a8c31b000 rw-p 00006000 08:01 451035                     /usr/local/apache2/modules/mod_auth_digest.so
7f5a8c31b000-7f5a8c321000 r-xp 00000000 08:01 451032                     /usr/local/apache2/modules/mod_authnz_ldap.so
7f5a8c321000-7f5a8c520000 ---p 00006000 08:01 451032                     /usr/local/apache2/modules/mod_authnz_ldap.so
7f5a8c520000-7f5a8c521000 rw-p 00005000 08:01 451032                     /usr/local/apache2/modules/mod_authnz_ldap.so
7f5a8c521000-7f5a8c586000 r-xp 00000000 08:01 412831                     /usr/lib/libgcrypt.so.11.4.4
7f5a8c586000-7f5a8c785000 ---p 00065000 08:01 412831                     /usr/lib/libgcrypt.so.11.4.4
7f5a8c785000-7f5a8c788000 rw-p 00064000 08:01 412831                     /usr/lib/libgcrypt.so.11.4.4
7f5a8c788000-7f5a8c797000 r-xp 00000000 08:01 412837                     /usr/lib/libtasn1.so.3.0.15
7f5a8c797000-7f5a8c997000 ---p 0000f000 08:01 412837                     /usr/lib/libtasn1.so.3.0.15
7f5a8c997000-7f5a8c998000 rw-p 0000f000 08:01 412837                     /usr/lib/libtasn1.so.3.0.15
7f5a8c998000-7f5a8ca3f000 r-xp 00000000 08:01 411071                     /usr/lib/libgnutls.so.26.4.6
7f5a8ca3f000-7f5a8cc3f000 ---p 000a7000 08:01 411071                     /usr/lib/libgnutls.so.26.4.6
7f5a8cc3f000-7f5a8cc4a000 rw-p 000a7000 08:01 411071                     /usr/lib/libgnutls.so.26.4.6
7f5a8cc4a000-7f5a8cc63000 r-xp 00000000 08:01 412081                     /usr/lib/libsasl2.so.2.0.22
7f5a8cc63000-7f5a8ce63000 ---p 00019000 08:01 412081                     /usr/lib/libsasl2.so.2.0.22
7f5a8ce63000-7f5a8ce64000 rw-p 00019000 08:01 412081                     /usr/lib/libsasl2.so.2.0.22
7f5a8ce64000-7f5a8ce74000 r-xp 00000000 08:01 1884178                    /lib/libresolv-2.7.so
7f5a8ce74000-7f5a8d074000 ---p 00010000 08:01 1884178                    /lib/libresolv-2.7.so
7f5a8d074000-7f5a8d076000 rw-p 00010000 08:01 1884178                    /lib/libresolv-2.7.so
7f5a8d076000-7f5a8d078000 rw-p 7f5a8d076000 00:00 0 
7f5a8d078000-7f5a8d086000 r-xp 00000000 08:01 409980                     /usr/lib/liblber-2.4.so.2.1.0
7f5a8d086000-7f5a8d286000 ---p 0000e000 08:01 409980                     /usr/lib/liblber-2.4.so.2.1.0
7f5a8d286000-7f5a8d287000 rw-p 0000e000 08:01 409980                     /usr/lib/liblber-2.4.so.2.1.0
7f5a8d287000-7f5a8d2cc000 r-xp 00000000 08:01 409981                     /usr/lib/libldap_r-2.4.so.2.1.0
7f5a8d2cc000-7f5a8d4cb000 ---p 00045000 08:01 409981                     /usr/lib/libldap_r-2.4.so.2.1.0
7f5a8d4cb000-7f5a8d4ce000 rw-p 00044000 08:01 409981                     /usr/lib/libldap_r-2.4.so.2.1.0
7f5a8d4ce000-7f5a8d4d0000 rw-p 7f5a8d4ce000 00:00 0 
7f5a8d4d0000-7f5a8d4dc000 r-xp 00000000 08:01 451048                     /usr/local/apache2/modules/mod_ldap.so
7f5a8d4dc000-7f5a8d6db000 ---p 0000c000 08:01 451048                     /usr/local/apache2/modules/mod_ldap.so
7f5a8d6db000-7f5a8d6dc000 rw-p 0000b000 08:01 451048                     /usr/local/apache2/modules/mod_ldap.so
7f5a8d6dc000-7f5a8d6de000 r-xp 00000000 08:01 451028                     /usr/local/apache2/modules/mod_authz_groupfile.so
7f5a8d6de000-7f5a8d8dd000 ---p 00002000 08:01 451028                     /usr/local/apache2/modules/mod_authz_groupfile.so
7f5a8d8dd000-7f5a8d8de000 rw-p 00001000 08:01 451028                     /usr/local/apache2/modules/mod_authz_groupfile.so
7f5a8d8de000-7f5a8d8df000 r-xp 00000000 08:01 451029                     /usr/local/apache2/modules/mod_authz_user.so
7f5a8d8df000-7f5a8dadf000 ---p 00001000 08:01 451029                     /usr/local/apache2/modules/mod_authz_user.so
7f5a8dadf000-7f5a8dae0000 rw-p 00001000 08:01 451029                     /usr/local/apache2/modules/mod_authz_user.so
7f5a8dae0000-7f5a8dae2000 r-xp 00000000 08:01 451022                     /usr/local/apache2/modules/mod_authn_file.so
7f5a8dae2000-7f5a8dce1000 ---p 00002000 08:01 451022                     /usr/local/apache2/modules/mod_authn_file.so
7f5a8dce1000-7f5a8dce2000 rw-p 00001000 08:01 451022                     /usr/local/apache2/modules/mod_authn_file.so
7f5a8dce2000-7f5a8dce4000 r-xp 00000000 08:01 451034                     /usr/local/apache2/modules/mod_auth_basic.so
7f5a8dce4000-7f5a8dee3000 ---p 00002000 08:01 451034                     /usr/local/apache2/modules/mod_auth_basic.so
7f5a8dee3000-7f5a8dee4000 rw-p 00001000 08:01 451034                     /usr/local/apache2/modules/mod_auth_basic.so
7f5a8dee4000-7f5a8dee6000 r-xp 00000000 08:01 451027                     /usr/local/apache2/modules/mod_authz_host.so
7f5a8dee6000-7f5a8e0e5000 ---p 00002000 08:01 451027                     /usr/local/apache2/modules/mod_authz_host.so
7f5a8e0e5000-7f5a8e0e6000 rw-p 00001000 08:01 451027                     /usr/local/apache2/modules/mod_authz_host.so
7f5a8e0e6000-7f5a8e0fc000 r-xp 00000000 08:01 411922                     /usr/lib/libz.so.1.2.3.3
7f5a8e0fc000-7f5a8e2fc000 ---p 00016000 08:01 411922                     /usr/lib/libz.so.1.2.3.3
7f5a8e2fc000-7f5a8e2fd000 rw-p 00016000 08:01 411922                     /usr/lib/libz.so.1.2.3.3
7f5a8e2fd000-7f5a8e447000 r-xp 00000000 08:01 1884164                    /lib/libc-2.7.so
7f5a8e447000-7f5a8e646000 ---p 0014a000 08:01 1884164                    /lib/libc-2.7.so
7f5a8e646000-7f5a8e649000 r--p 00149000 08:01 1884164                    /lib/libc-2.7.so
7f5a8e649000-7f5a8e64b000 rw-p 0014c000 08:01 1884164                    /lib/libc-2.7.so
7f5a8e64b000-7f5a8e650000 rw-p 7f5a8e64b000 00:00 0 
7f5a8e650000-7f5a8e652000 r-xp 00000000 08:01 1884167                    /lib/libdl-2.7.so
7f5a8e652000-7f5a8e852000 ---p 00002000 08:01 1884167                    /lib/libdl-2.7.so
7f5a8e852000-7f5a8e854000 rw-p 00002000 08:01 1884167                    /lib/libdl-2.7.so
7f5a8e854000-7f5a8e86a000 r-xp 00000000 08:01 1490949                    /lib/libpthread-2.7.so
7f5a8e86a000-7f5a8ea6a000 ---p 00016000 08:01 1490949                    /lib/libpthread-2.7.so
7f5a8ea6a000-7f5a8ea6c000 rw-p 00016000 08:01 1490949                    /lib/libpthread-2.7.so
7f5a8ea6c000-7f5a8ea70000 rw-p 7f5a8ea6c000 00:00 0 
7f5a8ea70000-7f5a8ea78000 r-xp 00000000 08:01 1884166                    /lib/libcrypt-2.7.so
7f5a8ea78000-7f5a8ec78000 ---p 00008000 08:01 1884166                    /lib/libcrypt-2.7.so
7f5a8ec78000-7f5a8ec7a000 rw-p 00008000 08:01 1884166                    /lib/libcrypt-2.7.so
7f5a8ec7a000-7f5a8eca8000 rw-p 7f5a8ec7a000 00:00 0 
7f5a8eca8000-7f5a8ecb0000 r-xp 00000000 08:01 1884179                    /lib/librt-2.7.so
7f5a8ecb0000-7f5a8eeaf000 ---p 00008000 08:01 1884179                    /lib/librt-2.7.so
7f5a8eeaf000-7f5a8eeb1000 rw-p 00007000 08:01 1884179                    /lib/librt-2.7.so
7f5a8eeb1000-7f5a8eeb4000 r-xp 00000000 08:01 835653                     /lib/libuuid.so.1.2
7f5a8eeb4000-7f5a8f0b4000 ---p 00003000 08:01 835653                     /lib/libuuid.so.1.2
7f5a8f0b4000-7f5a8f0b5000 rw-p 00003000 08:01 835653                     /lib/libuuid.so.1.2
7f5a8f0b5000-7f5a8f0e3000 r-xp 00000000 08:01 442477                     /usr/local/apache2/lib/libapr-1.so.0.4.5
7f5a8f0e3000-7f5a8f2e2000 ---p 0002e000 08:01 442477                     /usr/local/apache2/lib/libapr-1.so.0.4.5
7f5a8f2e2000-7f5a8f2e4000 rw-p 0002d000 08:01 442477                     /usr/local/apache2/lib/libapr-1.so.0.4.5
7f5a8f2e4000-7f5a8f3e0000 r-xp 00000000 08:01 419814                     /usr/local/lib/libiconv.so.2.5.1
7f5a8f3e0000-7f5a8f5df000 ---p 000fc000 08:01 419814                     /usr/local/lib/libiconv.so.2.5.1
7f5a8f5df000-7f5a8f5e1000 rw-p 000fb000 08:01 419814                     /usr/local/lib/libiconv.so.2.5.1
7f5a8f5e1000-7f5a8f607000 r-xp 00000000 08:01 442537                     /usr/local/apache2/lib/libexpat.so.0.5.0
7f5a8f607000-7f5a8f806000 ---p 00026000 08:01 442537                     /usr/local/apache2/lib/libexpat.so.0.5.0
7f5a8f806000-7f5a8f809000 rw-p 00025000 08:01 442537                     /usr/local/apache2/lib/libexpat.so.0.5.0
7f5a8f809000-7f5a8f82b000 r-xp 00000000 08:01 442544                     /usr/local/apache2/lib/libaprutil-1.so.0.4.1
7f5a8f82b000-7f5a8fa2a000 ---p 00022000 08:01 442544                     /usr/local/apache2/lib/libaprutil-1.so.0.4.1
7f5a8fa2a000-7f5a8fa2c000 rw-p 00021000 08:01 442544                     /usr/local/apache2/lib/libaprutil-1.so.0.4.1
7f5a8fa2c000-7f5a8faae000 r-xp 00000000 08:01 1884168                    /lib/libm-2.7.so
7f5a8faae000-7f5a8fcad000 ---p 00082000 08:01 1884168                    /lib/libm-2.7.so
7f5a8fcad000-7f5a8fcaf000 rw-p 00081000 08:01 1884168                    /lib/libm-2.7.so
7f5a8fcaf000-7f5a8fe22000 r-xp 00000000 08:01 412350                     /usr/lib/libcrypto.so.0.9.8
7f5a8fe22000-7f5a90021000 ---p 00173000 08:01 412350                     /usr/lib/libcrypto.so.0.9.8
7f5a90021000-7f5a90048000 rw-p 00172000 08:01 412350                     /usr/lib/libcrypto.so.0.9.8
7f5a90048000-7f5a9004b000 rw-p 7f5a90048000 00:00 0 
7f5a9004b000-7f5a90097000 r-xp 00000000 08:01 412351                     /usr/lib/libssl.so.0.9.8
7f5a90097000-7f5a90296000 ---p 0004c000 08:01 412351                     /usr/lib/libssl.so.0.9.8
7f5a90296000-7f5a9029d000 rw-p 0004b000 08:01 412351                     /usr/lib/libssl.so.0.9.8
7f5a9029d000-7f5a902b9000 r-xp 00000000 08:01 1884161                    /lib/ld-2.7.so
7f5a902cb000-7f5a902ef000 r--p 00000000 08:11 78799886                   /home/apache2/htdocs/horde/nag/locale/cs_CZ/LC_MESSAGES/nag.mo
7f5a902ef000-7f5a90310000 r--p 00000000 08:11 78799165                   /home/apache2/htdocs/horde/locale/cs_CZ/LC_MESSAGES/horde.mo
7f5a90310000-7f5a90326000 rw-s 00000000 00:08 5926133                    /dev/zero (deleted)
7f5a90326000-7f5a903a1000 rw-s 00000000 00:08 5926122                    /dev/zero (deleted)
7f5a903a1000-7f5a903a4000 r-xp 00000000 08:01 412824                     /usr/lib/libgpg-error.so.0.3.0
7f5a903a4000-7f5a904a3000 ---p 00003000 08:01 412824                     /usr/lib/libgpg-error.so.0.3.0
7f5a904a3000-7f5a904a4000 rw-p 00002000 08:01 412824                     /usr/lib/libgpg-error.so.0.3.0
7f5a904a4000-7f5a904ab000 rw-p 7f5a904a4000 00:00 0 
7f5a904ae000-7f5a904b5000 r--s 00000000 08:01 412528                     /usr/lib/gconv/gconv-modules.cache
7f5a904b5000-7f5a904b8000 rw-p 7f5a904b5000 00:00 0 
7f5a904b8000-7f5a904ba000 rw-p 0001b000 08:01 1884161                    /lib/ld-2.7.so
7fffbabba000-7fffbabcf000 rw-p 7ffffffe9000 00:00 0                      [stack]
7fffbabff000-7fffbac00000 r-xp 7fffbabff000 00:00 0                      [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
[Wed Mar 28 13:21:35 2012] [notice] child pid 5429 exit signal Aborted (6), possible coredump in /usr/local/var/apache_cores

I've also confirmed the above testcase triggers it on 5.3.10 via CLI. Can provide 
full access to any php developer interested in taking a look, just email me.

Also to add, USE_ZEND_ALLOC=0 did not resolve but gc_disable(); did

For me it seems the solution is to compile PHP with

--disable-zend-multibyte

instead of

--enable-zend-multibyte

But I am not sure if it breaks something else, I didn't find much 
documentation on these options.

[02:48] <@nikic> I think user comments should be blocked and there should be 
some big message at the top saying that people should report separate bugs for 
their issues
 [02:48] <@nikic> So if someone can edit the report to include a message at the 
top that would be great
 [02:48] <@nikic> It doesn't really help a lot if all zend_mm_heap corrupted 
reports go into one bug ^^

No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.