php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #15666 segfault with Sablot-0.82 and php 4.1.1
Submitted: 2002-02-21 21:43 UTC Modified: 2002-06-04 04:24 UTC
Votes:3
Avg. Score:4.0 ± 0.8
Reproduced:2 of 2 (100.0%)
Same Version:2 (100.0%)
Same OS:1 (50.0%)
From: synaxin at hotmail dot com Assigned:
Status: Not a bug Package: Sablotron XSL
PHP Version: 4.1.1 OS: Mandrake Linux 8.0 2.4.9 kernel
Private report: No CVE-ID: None
 [2002-02-21 21:43 UTC] synaxin at hotmail dot com
This could very well possibly be a bug with Sablot-0.82 
Submitting it to both parties.  I am not sure what is 
causing the problems.  I can send the xsl file in 
question, and possibly the xml involved as it was Dom 
generated, I can also send the php code involved - it will 
contain all of the Dom calls that built the xml.

Versions:
	Apache-1.3.20
	Sablot-0.82
	php-4.1.1
	expat-1.95.2

Configurations:
	------Apache----
	./configure --enable-module=ssl
        --enable-module=so
        --activate-module=src/modules/php4/libphp4.a
        --prefix=/usr/local/apache

        ------Sablot----
	./configure --prefix=/usr/local

        ------php-------
        ./configure --enable-debug --with-xslt-sablot
        --with-regex=php
        --with-mm=/home/httptools/mm-1.1.3
        --with-java=/usr/local/jdk
        --with-apache=/usr/local/httptools/apache-1.3.20
        --with-expat=/home/httptools/expat-1.95.2
        --with-zlib-dir=/home/httptools/zlib-1.1.3
        --with-dom=/home/httptools/libxml-1.8.17
        --enable-xslt
        --enable-sockets
        --with-mysql=/usr/local/mysql
        --enable-gmp
        --prefix=/usr/local/php
        --enable-track-vars
        --enable-trans-sid
        --enable-discard-path
        --enable-ftp

****Apache Core Dump:*********
[root@synaxin apache]# gdb bin/httpd
GNU gdb 5.0mdk-11mdk Linux-Mandrake 8.0
Copyright 2001 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public 
License, and you arewelcome to change it and/or distribute 
copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show 
warranty" for details.
This GDB was configured as "i386-mandrake-linux"...
(gdb) run -X
Starting program: /usr/local/apache/bin/httpd -X

Program received signal SIGSEGV, Segmentation fault.
0x402d00db in free () from /lib/libc.so.6
(gdb) bt
#0  0x402d00db in free () from /lib/libc.so.6
#1  0x402cfe94 in free () from /lib/libc.so.6
#2  0x400b7654 in __builtin_delete (ptr=0x7d9c6)
   from /usr/local/lib/libsablot.so.0
#3  0x4006347b in Str::~Str (this=0x83968b8, __in_chrg=3) 
at datastr.h:249
#4  0x4006d11b in Expression::clearContent (this=0x839e248)
    at expr.cpp:1294
#5  0x4006d024 in Expression::~Expression (this=0x839e248, 
__in_chrg=3)
    at expr.cpp:1271
#6  0x400baccf in PList<Expression *>::freeall 
(this=0x839df98, asArray=0)
    at datastr.h:770
#7  0x4006d081 in Expression::clearContent (this=0x839df90)
    at expr.cpp:1283
#8  0x4006d024 in Expression::~Expression (this=0x839df90, 
__in_chrg=3)
    at expr.cpp:1271
#9  0x400a8105 in Attribute::~Attribute (this=0x83c3df0, 
__in_chrg=2)
    at verts.cpp:1039
#10 0x400a518b in VertexList::destructMembers 
(this=0x83c3d34)
    at verts.cpp:462
#11 0x400a6157 in Element::~Element (this=0x83c3cd8, 
__in_chrg=2)
    at verts.cpp:735
#12 0x400a518b in VertexList::destructMembers 
(this=0x83c2948)
    at verts.cpp:462
#13 0x400a59ed in Daddy::~Daddy (this=0x83c2924, 
__in_chrg=0)
    at verts.cpp:587
#14 0x400a6192 in Element::~Element (this=0x83c2924, 
__in_chrg=2)
    at arena.h:80
#15 0x400a518b in VertexList::destructMembers 
(this=0x83c108c)
    at verts.cpp:462
#16 0x400a59ed in Daddy::~Daddy (this=0x83c1068, 
__in_chrg=0)
    at verts.cpp:587
#17 0x400a6192 in Element::~Element (this=0x83c1068, 
__in_chrg=2)
    at arena.h:80
#18 0x400a518b in VertexList::destructMembers 
(this=0x83c0de0)
    at verts.cpp:462
#19 0x400a59ed in Daddy::~Daddy (this=0x83c0dbc, 
__in_chrg=0)
    at verts.cpp:587
#20 0x400a6192 in Element::~Element (this=0x83c0dbc, 
__in_chrg=2)
    at arena.h:80
#21 0x400a518b in VertexList::destructMembers 
(this=0x83c0278)
    at verts.cpp:462
#22 0x400a59ed in Daddy::~Daddy (this=0x83c0254, 
__in_chrg=0)
    at verts.cpp:587
#23 0x400a6192 in Element::~Element (this=0x83c0254, 
__in_chrg=2)
    at arena.h:80
#24 0x400a518b in VertexList::destructMembers 
(this=0x83c007c)
    at verts.cpp:462
#25 0x400a59ed in Daddy::~Daddy (this=0x83c0058, 
__in_chrg=0)
    at verts.cpp:587
#26 0x400a6192 in Element::~Element (this=0x83c0058, 
__in_chrg=0)
    at arena.h:80
#27 0x400c4aa7 in XSLElement::~XSLElement (this=0x83c0058, 
__in_chrg=2)
    at datastr.h:670
#28 0x400a518b in VertexList::destructMembers 
(this=0x83bfb78)
    at verts.cpp:462
#29 0x400a59ed in Daddy::~Daddy (this=0x83bfb54, 
__in_chrg=0)
    at verts.cpp:587
#30 0x400a6192 in Element::~Element (this=0x83bfb54, 
__in_chrg=0)
    at arena.h:80
#31 0x400c4aa7 in XSLElement::~XSLElement (this=0x83bfb54, 
__in_chrg=2)
    at datastr.h:670
#32 0x400a518b in VertexList::destructMembers 
(this=0x83bf7fc)
    at verts.cpp:462
#33 0x400a59ed in Daddy::~Daddy (this=0x83bf7d8, 
__in_chrg=0)
    at verts.cpp:587
#34 0x400a6192 in Element::~Element (this=0x83bf7d8, 
__in_chrg=0)
    at arena.h:80
#35 0x400a5c27 in RootNode::~RootNode (this=0x83bf7d8, 
__in_chrg=2)
    at verts.cpp:643
#36 0x4009adef in Tree::~Tree (this=0x8395448, 
__in_chrg=3) at tree.h:124
#37 0x4008cf1f in Processor::freeNonArgDatalines 
(this=0x83877c8)
    at datastr.h:719
#38 0x4008d018 in Processor::cleanupAfterRun 
(this=0x83877c8, Sp=0x8387720)
    at proc.cpp:282
#39 0x400938cc in SablotRunProcessor (processor_=0x83877c8,
    sheetURI=0x83a85fc "arg:/_xsl", inputURI=0x83a880c 
"arg:/_xml",
    resultURI=0x824d5c3 "arg:/_result", params=0x0, 
arguments=0x83a8ac4)
    at sablot.cpp:426
#40 0x0813ca37 in zif_xslt_process (ht=5, 
return_value=0x83a898c,
    this_ptr=0x0, return_value_used=1) at sablot.c:514
#41 0x0817450c in execute (op_array=0x8366664) at 
./zend_execute.c:1590
#42 0x08174742 in execute (op_array=0x8366c2c) at 
./zend_execute.c:1630
#43 0x08174742 in execute (op_array=0x8364c04) at 
./zend_execute.c:1630
#44 0x08155e90 in zend_execute_scripts (type=8, 
retval=0x0, file_count=3)
    at zend.c:814
#45 0x080b1e55 in php_execute_script 
(primary_file=0xbffff300)
    at main.c:1307
#46 0x0815fcb7 in apache_php_module_main (r=0x8337efc,
    display_source_mode=0) at sapi_apache.c:90
#47 0x080ae8e2 in send_php (r=0x8337efc, 
display_source_mode=0,
    filename=0x0) at mod_php4.c:575
#48 0x080ae943 in send_parsed_php (r=0x8337efc) at 
mod_php4.c:590
#49 0x0817f0b7 in ap_invoke_handler ()
#50 0x081940cb in process_request_internal ()
#51 0x08194140 in ap_process_request ()
#52 0x0818b122 in child_main ()
#53 0x0818b2f4 in make_child ()
#54 0x0818b468 in startup_children ()
#55 0x0818bae7 in standalone_main ()
#56 0x0818c33f in main ()
#57 0x4026e0de in __libc_start_main () from /lib/libc.so.6
(gdb)

***********End of Backtrace*********************

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-06-04 04:24 UTC] mfischer@php.net
Thank you for taking the time to report a problem with PHP.
Unfortunately your version of PHP is too old -- the problem
might already be fixed. Please download a new PHP
version from http://www.php.net/downloads.php

If you are able to reproduce the bug with one of the latest
versions of PHP, please change the PHP version on this bug report
to the version you tested and change the status back to "Open".
Again, thank you for your continued support of PHP.


 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sat Apr 20 13:01:29 2024 UTC