php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #42893 segfault on ia64 when working w/ constants
Submitted: 2007-10-08 19:24 UTC Modified: 2008-07-26 01:00 UTC
Votes:6
Avg. Score:4.8 ± 0.4
Reproduced:6 of 6 (100.0%)
Same Version:3 (50.0%)
Same OS:4 (66.7%)
From: hoffie at gentoo dot org Assigned:
Status: No Feedback Package: Reproducible crash
PHP Version: 5.2.5 OS: Linux on ia64
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: hoffie at gentoo dot org
New email:
PHP Version: OS:

 

 [2007-10-08 19:24 UTC] hoffie at gentoo dot org 
Description:
------------
>=php-5.2.0 seems to be totally broken on the ia64 architecture: Even when compiling with very minimal features PHP simply segfaults when doing basic operations involving constants, e.g. using define() or defined(). As soon as debugging symbols are enabled (CFLAGS=-g or ./configure --enable-debug) the problem disappears, that's why I'm unable to provide a useful backtrace.
As the problem first appeared in 5.2.0 it might be related to the memory manager changes?
The patch mentioned in bug 42317 makes this problem disappear as well, but as one of you already noted in the other bug it's probably not a real solution.

Reproduce code:
---------------
i2 php5.2-200710081630 # ./configure --disable-all --disable-cgi --enable-cli && make
[...]
i2 php5.2-200710081630 # ./sapi/cli/php -r 'var_dump(defined("foo"));'

Versions of related libs/tools: automake-1.10, autoconf-2.13, libtool-1.5.24, bison-2.3, flex-2.5.4, gcc-4.1.2, glibc-2.5, binutils-2.17
This is on a fresh Gentoo system, but when compiling on Debian Etch the same problems appear, so I don't think it's related to distribution-specific patches to toolchain parts like binutils/gcc.

Expected result:
----------------
bool(false)

Actual result:
--------------
Segmentation fault
(gdb) run -r 'var_dump(defined("foo"));'
Starting program: /tmp/php5.2-200710081630/sapi/cli/php -r 'var_dump(defined("foo"));'

Program received signal SIGSEGV, Segmentation fault.
_zval_ptr_dtor (zval_ptr=0x60000fffff91ebd0) at /tmp/php5.2-200710081630/Zend/zend_execute_API.c:412
412             (*zval_ptr)->refcount--;
(gdb) bt
#0  _zval_ptr_dtor (zval_ptr=0x60000fffff91ebd0) at /tmp/php5.2-200710081630/Zend/zend_execute_API.c:412
#1  0x4000000000298860 in zend_do_fcall_common_helper_SPEC (execute_data=0x60000fffff91ec50)
    at /tmp/php5.2-200710081630/Zend/zend_execute.h:155
ia64-tdep.c:1591: internal-error: ia64_frame_prev_register: Assertion `regnum >= 0' failed.
A problem internal to GDB has been detected,
further debugging may prove unreliable.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2007-10-11 13:46 UTC] jani@php.net 
Just to be sure you're not loading any php.ini files, try this:

(gdb) run -n -r 'var_dump(defined("foo"));'

And you could also try to see what valgrind has to say about it:

# USE_ZEND_ALLOC=0 valgrind --leak-check=yes php -n -r 'var_dump(defined("foo"));'
 [2007-10-13 10:13 UTC] hoffie at gentoo dot org 
> Just to be sure you're not loading any php.ini files, try this:
> (gdb) run -n -r 'var_dump(defined("foo"));'
Fails with the same symptoms.

> And you could also try to see what valgrind has to say about it:
> # USE_ZEND_ALLOC=0 valgrind --leak-check=yes php -n -r
> 'var_dump(defined("foo"));'
If you gave me valgrind for ia64 I'd happily do that. ;)

> checking for a supported CPU... no (ia64)
> configure: error: Unsupported host architecture. Sorry
 [2007-10-29 23:15 UTC] jani@php.net 
From the looks of it, you have more problems than just PHP here. Not only PHP breaks but also GDB. How about you try get the basic tools working before trying PHP? :)
 [2007-11-08 15:02 UTC] mail at markus-ullmann dot de 
erm...

[29 Oct 11:15pm UTC] jani@php.net 
Not only PHP breaks but also GDB.

Tell me plz how you guessed that GDB is broken. Just valgrind is not 
available on ia64 architecture but gdb works fine.

[8 Oct 7:24pm UTC] hoffie at gentoo dot org
As soon as debugging symbols are enabled (CFLAGS=-g or
./configure --enable-debug) the problem disappears, that's why I'm
unable to provide a useful backtrace.

Notice that the _problem disappears_.
 [2007-11-09 20:26 UTC] hoffie at gentoo dot org 
Yes, I admit that above gdb output shows some strangeness, but well -- that's a gdb problem, not generally software being broken on that system. Upgrading gdb resolved that problem and here goes the new backtrace (using 5.2.5RC2 now):

(gdb) r -n -r 'var_dump(defined("foo"));'

Starting program: /tmp/php-5.2.5RC2/sapi/cli/php -n -r 'var_dump(defined("foo"));'

Program received signal SIGSEGV, Segmentation fault.
_zval_ptr_dtor (zval_ptr=0x60000ffffff3ebd0)
    at /tmp/php-5.2.5RC2/Zend/zend_execute_API.c:412
412             (*zval_ptr)->refcount--;
(gdb) bt
#0  _zval_ptr_dtor (zval_ptr=0x60000ffffff3ebd0)
    at /tmp/php-5.2.5RC2/Zend/zend_execute_API.c:412
#1  0x4000000000298a80 in zend_do_fcall_common_helper_SPEC (
    execute_data=0x60000ffffff3ec50)
    at /tmp/php-5.2.5RC2/Zend/zend_execute.h:155
#2  0x4000000000297200 in execute (op_array=0x60000000000c86e0)
    at /tmp/php-5.2.5RC2/Zend/zend_vm_execute.h:92
#3  0x4000000000228800 in zend_eval_string (str=<value optimized out>, 
    retval_ptr=0x0, string_name=0x400000000041fd10 "Command line code")
    at /tmp/php-5.2.5RC2/Zend/zend_execute_API.c:1171
#4  0x4000000000228c10 in zend_eval_string_ex (
    str=0x60000ffffff3f740 "var_dump(defined(\"foo\"));", retval_ptr=0x0, 
    string_name=0x400000000041fd10 "Command line code", handle_exceptions=1)
    at /tmp/php-5.2.5RC2/Zend/zend_execute_API.c:1205
#5  0x40000000003a2130 in main (argc=Cannot access memory at address 0x10
)
    at /tmp/php-5.2.5RC2/sapi/cli/php_cli.c:1179
 [2007-11-12 10:32 UTC] tony2001@php.net 
This looks like a broken binary, I've seen similar problems on SPARC with GCC 3.x unable to generate working PHP executable.
Try newer/other GCC version.
 [2007-11-12 17:52 UTC] hoffie at gentoo dot org 
We are not using gcc-3.x, but gcc-4.1(.2). Anyway, I've tried with 4.2.0 (as it was already installed) and it fails for the same reasons. I'm going to try 4.2.2, I can probably give you results later.
 [2007-11-12 19:26 UTC] hoffie at gentoo dot org 
Still reproducable with gcc-4.2.2 and php-5.2.5 (final).
 [2007-11-17 01:56 UTC] jani@php.net 
Can you reproduce this with any linux distro on that machine?
 [2007-11-17 09:07 UTC] hoffie at gentoo dot org 
I've only tried Gentoo and Debian so far, but I think this should be sufficient. If it fails on two distros and previous versions of php worked (and still work) then it's likely that it is a bug which got introduced with php-5.2, isn't it?

If you still want me to try it on another distro, please point me to some resource to easily install one (like Debians debootstrap).
 [2008-06-26 00:56 UTC] ryan dot oliver at dse dot vic dot gov dot au 
Same issue here with php-5.2.6 on ia64 (SGI Prism w SLES 9 SP3) using gcc-4.2.4 + binutils-2.18.0.

> As soon as debugging symbols are enabled (CFLAGS=-g or
> ./configure --enable-debug) the problem disappears ...

Issue appears from my rudimentary tests to be due to compiler optimizations, debug symbols have no bearing on the issue

Compiled with CFLAGS=-O0 CXXFLAGS=-O0 no segfault occurs.
Compiled with CFLAGS=-O1 CXXFLAGS=-O1 no segfault occurs.

So whatever the issue is, it is exposed by one/some of the 27 -O2 gcc optimizations.
 [2008-07-18 16:23 UTC] jani@php.net 
Even if some change between PHP versions is causing this, it's only happening on ia64, so it might as well be a bug in the compiler. Have you tried more recent GCC version..?
 [2008-07-26 01:00 UTC] php-bugs at lists dot php dot net 
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 [2009-03-15 16:50 UTC] xavier dot martin at enovance dot com 
Same issue with:
* Sun UltraSparc
* php-5.2.8
* gcc 4.3 (debian stable, lenny)
* default CFLAGS

(gdb) run -n -r 'var_dump(defined("foo"));'

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xf7fcc6b0 (LWP 29465)]
0x002ceb88 in _zval_ptr_dtor (zval_ptr=0xffee16f4) at /tmp/src/php-
5.2.8/Zend/zend_execute_API.c:412
412             (*zval_ptr)->refcount--;
 [2013-10-14 11:40 UTC] devurandom at gmx dot net 
Has anyone had a look at this in the recent years?
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Mon Nov 25 14:01:32 2024 UTC