PHP :: Bug #33697 :: segfault on dump

Bug #33697	segfault on dump_mem
Submitted:	2005-07-14 16:13 UTC	Modified:	2005-07-22 01:00 UTC
From:	pavlomt at hotmail dot com	Assigned:
Status:	No Feedback	Package:	DOM XML related
PHP Version:	4.4.0	OS:	SLES9 (x86_64)
Private report:	No	CVE-ID:	None

View Add Comment Developer Edit

Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please — but make sure to vote on the bug!

Your email address: MUST BE VALID
Solve the problem: 46 - 35 = ?
Subscribe to this entry?

[2005-07-14 16:13 UTC] pavlomt at hotmail dot com

Description:
------------
php compiled on 32 bit x86, running as appache2 module (apache2-2.0.49-27.8 from SLES9-32bit)

'./configure' '--host=i686-suse-linux' '--build=i686-suse-linux' '--target=i586-suse-linux' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/usr/com' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--with-apxs2=/usr/sbin/apxs2-prefork' '--disable-debug' '--with-config-file-path=/etc' '--with-zlib-dir=/usr' '--with-xml=shared' '--with-expat-dir=/usr' '--enable-inline-optimization' '--enable-memory-limit' '--enable-magic-quotes' '--enable-safe-mode' '--enable-sigchild' '--disable-ctype' '--enable-session' '--with-informix=/opt/ICSDK' '--with-mysql=shared' '--with-bz2=shared' '--with-zlib' '--with-pear' '--with-dom' '--with-dom-xslt' '--with-dom-exslt'



Reproduce code:
---------------
    $this->r_result = $this->r_xsl->process($this->r_xml, $array);

//      $this->r_xml->dump_mem(1); //- no segfault !!!
        echo $this->r_xsl->result_dump_mem( $this->r_result); //segfault
//      echo $this->r_result->dump_mem(0); //segfault

segfaults not depends on 0/1 parameter to dump_mem.

dynamically bulded xml-result of multiple database selects
more than 20 lines

Actual result:
--------------
rogram received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1434784864 (LWP 5835)]
0x5579e226 in free () from /lib/tls/libc.so.6
(gdb) backtrace
#0  0x5579e226 in free () from /lib/tls/libc.so.6
#1  0x55cd1cfb in xsltFreeKeys () from /usr/lib/libxslt.so.1
#2  0x55cc4f8a in xsltFreeStylesheet () from /usr/lib/libxslt.so.1
#3  0x55a7006c in php_free_xslt_stylesheet (rsrc=0x846bc74)
    at /usr/src/packages/BUILD/php-4.4.0/ext/domxml/php_domxml.c:834
#4  0x55b21223 in list_entry_destructor (ptr=0x846bc74)
    at /usr/src/packages/BUILD/php-4.4.0/Zend/zend_list.c:177
#5  0x55b1ede8 in zend_hash_apply_deleter (ht=0x55b816a0, p=0x8433c0c)
    at /usr/src/packages/BUILD/php-4.4.0/Zend/zend_hash.c:611
#6  0x55b1ef47 in zend_hash_graceful_reverse_destroy (ht=0x55b816a0)
    at /usr/src/packages/BUILD/php-4.4.0/Zend/zend_hash.c:677
#7  0x55b14704 in shutdown_executor () at /usr/src/packages/BUILD/php-4.4.0/Zend/zend_execute_API.c:211
#8  0x55b1abe4 in zend_deactivate () at /usr/src/packages/BUILD/php-4.4.0/Zend/zend.c:693
#9  0x55aefcbe in php_request_shutdown (dummy=0x0) at /usr/src/packages/BUILD/php-4.4.0/main/main.c:997
#10 0x55b2e285 in php_handler (r=0x820a458)
    at /usr/src/packages/BUILD/php-4.4.0/sapi/apache2handler/sapi_apache2.c:443
#11 0x08069288 in ap_run_handler ()
#12 0x0806c8a7 in ap_invoke_handler ()
#13 0x0806688c in ap_internal_redirect ()
#14 0x559f1df3 in handler_redirect () from /usr/lib/apache2-prefork/mod_rewrite.so
#15 0x08069288 in ap_run_handler ()
#16 0x0806c8a7 in ap_invoke_handler ()
#17 0x080669fb in ap_process_request ()
#18 0x08061168 in ap_process_http_connection ()
#19 0x080746b8 in ap_run_process_connection ()
#20 0x080747f0 in ap_process_connection ()
#21 0x08067ea5 in child_main ()
#22 0x080680fc in make_child ()
#23 0x08068b85 in ap_mpm_run ()
#24 0x0806f627 in main ()
(gdb)

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports

[2005-07-14 20:37 UTC] tony2001@php.net

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc.

If possible, make the script source available online and provide
an URL to it here. Try to avoid embedding huge scripts into the report.

[2005-07-14 22:02 UTC] pavlomr at hotmail dot com

Sorry, with short scripts - no segfaults.
segfaults occupied in complex multi-module project with dynamically generated xml data.

[2005-07-14 22:53 UTC] pavlomt at hotmail dot com

sorry, it's faults on  $this->r_xsl->process($this->r_xml, $array);, not in echo.

[2005-07-14 23:41 UTC] tony2001@php.net

That doesn't help much, we need a reproduce code to replicate (and fix) the problem. Just telling that it segfaults on some line in some code doesn't give any info.
Please try to cook not very big script that doesn't require any external resources like DBs, network connections etc.
Thanks.

[2005-07-22 01:00 UTC] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2024 The PHP Group All rights reserved.	Last updated: Fri Apr 26 10:01:31 2024 UTC