php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #51980 XML/XSLT Aborts during function return
Submitted: 2010-06-02 21:18 UTC Modified: 2010-06-02 22:41 UTC
From: ray at discountofficeitems dot com Assigned:
Status: Closed Package: XSLT related
PHP Version: 5.3.2 OS: Debian Linux Lenny
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: ray at discountofficeitems dot com
New email:
PHP Version: OS:

 

 [2010-06-02 21:18 UTC] ray at discountofficeitems dot com
Description:
------------
Using Zend Server CE with php 5.3.2.

In the test script, the reference counting appears to be handled differently depending on the return style.

if (true) {
	return $ret->saveXml(); // Broken
} else {
	$ret = $ret->saveXml(); // Working
	return $ret;
}

Test script:
---------------
Due to test script coming it at 60 lines, copied script to:

http://www.discountofficeitems.com/ray/boom.txt

Expected result:
----------------
to see "Finished" echoed out.

Actual result:
--------------
"Aborted (core dumped)" echoed out, and gdb has a backtrace of:

#0  0xb77bd424 in __kernel_vsyscall ()
#1  0xb75b8956 in kill () from /lib/i686/cmov/libc.so.6
#2  0xb5011dac in skgdbgcra () from /usr/lib/libclntsh.so.11.1
#3  0xb500f1a6 in skgesigCrash () from /usr/lib/libclntsh.so.11.1
#4  0xb500f433 in skgesig_sigactionHandler () from /usr/lib/libclntsh.so.11.1
#5  <signal handler called>
#6  0x084e9202 in xmlDictFree ()
#7  0x084e91d0 in xmlDictFree ()
#8  0x080c66e5 in php_libxml_decrement_doc_ref ()
#9  0x08158e00 in ?? ()
#10 0x088c06a0 in ?? ()
#11 0x00000000 in ?? ()


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2010-06-02 22:35 UTC] ray at discountofficeitems dot com
Appears to be fixed in source code version: php5.3-201006021830.
 [2010-06-02 22:41 UTC] ray at discountofficeitems dot com
-Status: Open +Status: Closed
 [2010-06-02 22:41 UTC] ray at discountofficeitems dot com
Appears to be fixed in source code version: php5.3-201006021830.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Sat Jul 12 05:01:33 2025 UTC