php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #46945 overwriting containing variable via extract segfaults in _zend_is_inconsistent
Submitted: 2008-12-26 15:46 UTC Modified: 2008-12-26 16:18 UTC
From: sjon at hortensius dot net Assigned:
Status: Not a bug Package: Reproducible crash
PHP Version: 5.2.8 OS: Linux
Private report: No CVE-ID: None
 [2008-12-26 15:46 UTC] sjon at hortensius dot net
Description:
------------
The supplied code shouldn't crash

Reproduce code:
---------------
$x = array('x' => 9);
extract($x);

Actual result:
--------------
#0  0x08279691 in _zend_is_inconsistent (ht=0x9, 
    file=0x850ada4 "/tmp/php/src/php-5.2.8/Zend/zend_hash.c", line=1277)
    at /tmp/php/src/php-5.2.8/Zend/zend_hash.c:54
#1  0x0827c8c0 in zend_hash_move_forward_ex (ht=0x9, pos=0xbfabdc68)
    at /tmp/php/src/php-5.2.8/Zend/zend_hash.c:1277
#2  0x0817d0e9 in zif_extract (ht=1, return_value=0x95da738, 
    return_value_ptr=0x0, this_ptr=0x0, return_value_used=0)
    at /tmp/php/src/php-5.2.8/ext/standard/array.c:1491
#3  0x08294a64 in zend_do_fcall_common_helper_SPEC (execute_data=0xbfabde78)
    at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:200
#4  0x0829a367 in ZEND_DO_FCALL_SPEC_CONST_HANDLER (execute_data=0xbfabde78)
    at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:1729
#5  0x082945e4 in execute (op_array=0x95da104)
    at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:92
#6  0x0826f70c in zend_execute_scripts (type=8, retval=0x0, file_count=3)
    at /tmp/php/src/php-5.2.8/Zend/zend.c:1215
#7  0x0821c793 in php_execute_script (primary_file=0xbfac0204)
    at /tmp/php/src/php-5.2.8/main/main.c:2044
#8  0x082ee8b6 in main (argc=2, argv=0xbfac0364)
    at /tmp/php/src/php-5.2.8/sapi/cli/php_cli.c:1139


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2008-12-26 16:18 UTC] scottmac@php.net
Duplicate of bug #46873
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Mon May 20 12:01:33 2024 UTC