php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #46945 overwriting containing variable via extract segfaults in _zend_is_inconsistent
Submitted: 2008-12-26 15:46 UTC Modified: 2008-12-26 16:18 UTC
From: sjon at hortensius dot net Assigned:
Status: Not a bug Package: Reproducible crash
PHP Version: 5.2.8 OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: sjon at hortensius dot net
New email:
PHP Version: OS:

 

 [2008-12-26 15:46 UTC] sjon at hortensius dot net 
Description:
------------
The supplied code shouldn't crash

Reproduce code:
---------------
$x = array('x' => 9);
extract($x);

Actual result:
--------------
#0  0x08279691 in _zend_is_inconsistent (ht=0x9, 
    file=0x850ada4 "/tmp/php/src/php-5.2.8/Zend/zend_hash.c", line=1277)
    at /tmp/php/src/php-5.2.8/Zend/zend_hash.c:54
#1  0x0827c8c0 in zend_hash_move_forward_ex (ht=0x9, pos=0xbfabdc68)
    at /tmp/php/src/php-5.2.8/Zend/zend_hash.c:1277
#2  0x0817d0e9 in zif_extract (ht=1, return_value=0x95da738, 
    return_value_ptr=0x0, this_ptr=0x0, return_value_used=0)
    at /tmp/php/src/php-5.2.8/ext/standard/array.c:1491
#3  0x08294a64 in zend_do_fcall_common_helper_SPEC (execute_data=0xbfabde78)
    at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:200
#4  0x0829a367 in ZEND_DO_FCALL_SPEC_CONST_HANDLER (execute_data=0xbfabde78)
    at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:1729
#5  0x082945e4 in execute (op_array=0x95da104)
    at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:92
#6  0x0826f70c in zend_execute_scripts (type=8, retval=0x0, file_count=3)
    at /tmp/php/src/php-5.2.8/Zend/zend.c:1215
#7  0x0821c793 in php_execute_script (primary_file=0xbfac0204)
    at /tmp/php/src/php-5.2.8/main/main.c:2044
#8  0x082ee8b6 in main (argc=2, argv=0xbfac0364)
    at /tmp/php/src/php-5.2.8/sapi/cli/php_cli.c:1139

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2008-12-26 16:18 UTC] scottmac@php.net 
Duplicate of bug #46873
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Sat Aug 02 22:00:02 2025 UTC