I get these errors on both Redhat Linux 7.3 & 8

I have tested this on different machines, so I do not think that this is a hardware error.

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.

[root@spinaker root]# gdb /usr/local/apache/bin/httpd
GNU gdb Red Hat Linux (5.2-2)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...
(no debugging symbols found)...
(gdb) run -X
Starting program: /usr/local/apache/bin/httpd -X
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
0x401ac9af in memcpy () from /lib/libc.so.6
(gdb) bt
#0  0x401ac9af in memcpy () from /lib/libc.so.6
#1  0x0810c512 in _mem_block_check ()
#2  0x0810c4d5 in _mem_block_check ()
#3  0x0810b72f in _efree ()
#4  0x0811af00 in _zval_dtor ()
#5  0x08111d0a in free_zend_constant ()
#6  0x0812167d in zend_hash_del_key_or_index ()
#7  0x08121f38 in zend_hash_reverse_apply ()
#8  0x08112113 in clean_non_persistent_constants ()
#9  0x0811290c in shutdown_executor ()
#10 0x0811c0c6 in zend_deactivate ()
#11 0x08079fbc in php_request_shutdown ()
#12 0x08127e82 in apache_php_module_main ()
#13 0x080774dc in php_restore_umask ()
#14 0x08077535 in php_restore_umask ()
#15 0x08149dc3 in ap_invoke_handler ()
#16 0x0815ed47 in ap_some_auth_required ()
#17 0x0815f16b in ap_internal_redirect ()
#18 0x0806bc3c in ap_get_server_built ()
#19 0x08149dc3 in ap_invoke_handler ()
#20 0x0815ed47 in ap_some_auth_required ()
#21 0x0815eda8 in ap_process_request ()
#22 0x08155be5 in ap_child_terminate ()
---Type <return> to continue, or q <return> to quit---
#23 0x08155d90 in ap_child_terminate ()
#24 0x08155f04 in ap_child_terminate ()
#25 0x0815657c in ap_child_terminate ()
#26 0x08156ddf in main ()
#27 0x401481c4 in __libc_start_main () from /lib/libc.so.6
(gdb)

Are you using PHP sessions, if so what session handler are you using?

I use files as my session handler. Have also tried with mm, but I think the same happens here.

I have now tested with RPMs from Redhat:
apache-1.3.27-2.i386.rpm
php-4.1.2-7.3.6.i386.rpm
php-mysql-4.1.2-7.3.6.i386.rpm

And these from MySQL:
MySQL-shared-3.23.54-1.i386.rpm
MySQL-4.0.5-0.i386.rpm

And i get the same error:
[Fri Dec 13 16:45:25 2002] [notice] child pid 1273 exit signal Segmentation fault (11)

I have also submitted a bug report to Redhat:
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=79561

I hope that's ok.

Could you please compile your PHP with --enable-debug, this will make you backtrace contain a lot more information. If you are able to do that then go the step #5 (free_zend_constant) and see what data the various pointers contains. I am especially interested in seeing what constant is being freed and if it is the same one everytime.

> Could you please compile your PHP with --enable-debug
I have done so.

> If you are able to do that then go the step #5
> (free_zend_constant) and see what data the various
> pointers contains.
> I am especially interested in seeing what constant is
> being freed and if it is the same one everytime.

Could you instruct me on how to do this? 
My knowledge only covers compiling and the information from here:
http://bugs.php.net/bugs-generating-backtrace.php

Go to the php directory, inside that directory edit a file called config.nice, one line above the line, which contains "$@" add the following line:
'--enable-debug' \
now do:
rm config.cache; make clean; ./config.nice; make; make install

You've now compiled & installed PHP that contains debugging symbols, when a crash occurs you should be able to see more detailed information when analyzing core files generated due to crash in PHP.
To see data at a certain step use gdb command such as frame 5, which will take you to a particular frame, list command, which will show the source code at this point and then p command to print the values of various variables & pointers.

If php is built into apache, where should I then be able to find a core file?
apache is here: /usr/local/apache/bin

This is what I get every time with Php 4.2.3 compiled into Apache.
More info @ http://test.webalogic.net/bugs/
I think the bug is happening when Apache is trying to kill children, as the SIGSEGV is happening when the stress tool is finished.

(gdb) run -X
Starting program: /usr/local/apache/bin/httpd -X

Program received signal SIGSEGV, Segmentation fault.
0x4207c46c in memcpy () from /lib/i686/libc.so.6
(gdb) bt
#0  0x4207c46c in memcpy () from /lib/i686/libc.so.6
#1  0x081041d0 in _mem_block_check ()
#2  0x08104197 in _mem_block_check ()
#3  0x081034a1 in _efree ()
#4  0x0811283c in _zval_dtor ()
#5  0x08109bac in free_zend_constant ()
#6  0x08118c29 in zend_hash_del_key_or_index ()
#7  0x081194a6 in zend_hash_reverse_apply ()
#8  0x08109fb4 in clean_non_persistent_constants ()
#9  0x0810a780 in shutdown_executor ()
#10 0x0811387f in zend_deactivate ()
#11 0x08078500 in php_request_shutdown ()
#12 0x0811f192 in apache_php_module_main ()
#13 0x080761cc in php_restore_umask ()
#14 0x08076237 in php_restore_umask ()
#15 0x08140990 in ap_invoke_handler ()
#16 0x08154d86 in ap_some_auth_required ()
#17 0x08154de6 in ap_process_request ()
#18 0x0814c0aa in ap_child_terminate ()
#19 0x0814c24a in ap_child_terminate ()
#20 0x0814c3b1 in ap_child_terminate ()
#21 0x0814c9de in ap_child_terminate ()
#22 0x0814d1fc in main ()
---Type <return> to continue, or q <return> to quit---
#23 0x420158d4 in __libc_start_main () from /lib/i686/libc.so.6
(gdb) frame 5
#5  0x08109bac in free_zend_constant ()
(gdb) list
1       <unknown>: No such file or directory.
        in <unknown>
(gdb) p
The history is empty.
(gdb)

I'll now start testing Php-4.3.0RC3

By starting Apache, with built in Php-4.3.0RC3, with 'gdb /usr/local/apache/bin/httpd' I can not make it crash.
But if I start Apache normally I get a Segmentation fault in the error_log. Please see the bottom of http://test.webalogic.net/bugs/error_log_php4-3 (2mb)

What can I do to help you further?

Could you provide copies of the list.phtml & info.phtml scripts?

The files has been sent to iliaa@php.net.

If none of my scripts has errors I can not get SIGSEGV. But I get "Last leak repeated X times". Have a look at http://test.webalogic.net/bugs/error_log-no_SIGSEGV and the other files at http://test.webalogic.net/

This is a fairly big script and I cannot even run it fully because I am missing over a dosen various includes your script requires. Is there any way you could reduce this to a single, preferably short script that could be used to replicate the memory leak you are seeing?

I can give you access to the system. Would you like that?

I have also sent an email to iliaa@php.net regarding this.

I appreciate your offer, but it would be much better if you could narrow down the problem. There is just too much code to go over.

I'll do my best.

No feedback was provided for this bug for over 2 weeks, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

With Php 4.3.0 I am not getting any Segmentation faults, but when I compile with --enable-debug I still get "Last leak repeated X times".