php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #46950 PHP 5.2.8 IIS ISAPI Crashing - Was Fine in 5.2.6
Submitted: 2008-12-27 03:32 UTC Modified: 2009-01-06 01:00 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:1 (100.0%)
From: w dot ashcroft at redfoxuk dot com Assigned:
Status: No Feedback Package: Unknown/Other Function
PHP Version: 5.2.8 OS: Windows 2003
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2008-12-27 03:32 UTC] w dot ashcroft at redfoxuk dot com
Description:
------------
Since upgrading to PHP 5.2.8, one of our servers has started to crash once or twice a day - I assumed PHP was the cause and DebugDiag points at PHP too.

I am not sure how to reproduce the crash on demand.

Zend Optimizer isn't enabled, it was the first thing I tried - still crashes without it.

Reproduce code:
---------------
n/a

Expected result:
----------------
n/a

Actual result:
--------------
In w3wp.exe__PID__1652.dmp the assembly instruction at php5ts!zend_hash_del_key_or_index+10a in \\?\C:\PHP5\php\php5ts.dll from The PHP Group has caused an access violation exception (0xC0000005) when trying to write to memory location 0x00000000 on thread 0


Thread 0 - System ID 904
Entry point   0x134c7078 
Create time   25/12/2008 14:58:47 
Time spent in user mode   0 Days 00:00:28.703 
Time spent in kernel mode   0 Days 00:00:24.328 

This thread is blocked by an unhandled exception


Function     Arg 1     Arg 2     Arg 3   Source 
php5ts!zend_hash_del_key_or_index+10a     138f1e68     0308a8cc     00000012    
php5ts!zend_unregister_functions+53     0308d070     ffffffff     00000000    
php5ts!module_destructor+7d     01c10178     138fa768     022d2160    
php5ts!zend_hash_apply_deleter+97     022d2160     01c10140     138fa768    
php5ts!zend_hash_graceful_reverse_destroy+13     022d2160     1394aa08     138fa768    
php5ts!zend_shutdown+2e     138fa768     138fa768     138fa768    
php5ts!php_module_shutdown+35     138fa768     00000000     00000000    
php5ts!php_module_shutdown_wrapper+f     022d2060     01df265d     01df0000    
php5isapi!DllMain+70     01df0000     00000000     00000001    
php5isapi!_DllMainCRTStartup+50     01df0000     00000000     00000001    
ntdll!LdrpCallInitRoutine+14     01df260d     01df0000     00000000    
ntdll!LdrShutdownProcess+182     00000000     00000001     138fb818    
kernel32!_ExitProcess+43     00000001     77e8f3b0     ffffffff    
kernel32!ExitProcess+14     00000001     0552f174     77bcaefc    
msvcrt!__crtExitProcess+32     00000001     138fb91c     00000058    
msvcrt!_cinit+d2     00000001     00000000     00000000    
msvcrt!exit+11     00000001     01e0a00b     020c330c    
php5ts!zend_mm_panic+24     020c330c     020c306c     00000001    
php5ts!_zend_mm_alloc_int+bb     00000181     0000004f     020c306c    
php5ts!_zend_mm_realloc_int+b6d     138fb818     00000000     0000004f    
php5ts!_erealloc+43     00000000     0000004f     00000000    
php5ts!xbuf_format_converter+7c     0552f474     020c306c     0552fe10    
php5ts!vspprintf+29     0552f4ac     00000400     020c306c    
php5ts!php_error_cb+3a     00000010     020c27dc     00000000    
php_soap!soap_error_handler+9c     00000010     020c27dc     00000000    
php5ts!zend_error+43e     00000010     020c306c     01e9846d    
php5ts!_zval_internal_dtor+33     13967e38     00000000     01e9c687    
php5ts!_zval_internal_ptr_dtor+1d     13967e9c     13967ec8     13967ed4    
php5ts!zend_hash_destroy+27     13967d10     13968068     01e9c687    
php5ts!delete_internal_hashtable+d     13967ed4     00000015     1397e3e8    
php5ts!zend_hash_destroy+27     137365a0     138fa768     01edf785    
php5ts!php_win32_core_globals_dtor+3c     1397e3e8     138fa768     01df0000    
php5ts!ts_free_thread+85     01df265d     01df0000     00000003    
php5isapi!DllMain+17     01df0000     00000003     00000000    
php5isapi!_DllMainCRTStartup+50     01df0000     00000003     00000000    
ntdll!LdrpCallInitRoutine+14     01df260d     01df0000     00000003    
ntdll!LdrShutdownThread+d2     134c7078     00000000     0552ff9c    
kernel32!ExitThread+2f     00000102     134c7078     5a300000    
kernel32!FreeLibraryAndExitThread+40     5a300000     00000102     00000000    
w3tp!THREAD_MANAGER::ThreadManagerThread+59     134c7078     00000000     00000000    
kernel32!BaseThreadStart+34     5a301d70     134c7078     00000000    

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2008-12-27 03:34 UTC] w dot ashcroft at redfoxuk dot com
Backtrace for readability:

php5ts!zend_hash_del_key_or_index+10a    
php5ts!zend_unregister_functions+53    
php5ts!module_destructor+7d    
php5ts!zend_hash_apply_deleter+97    
php5ts!zend_hash_graceful_reverse_destroy+13    
php5ts!zend_shutdown+2e    
php5ts!php_module_shutdown+35    
php5ts!php_module_shutdown_wrapper+f    
php5isapi!DllMain+70    
php5isapi!_DllMainCRTStartup+50    
ntdll!LdrpCallInitRoutine+14    
ntdll!LdrShutdownProcess+182    
kernel32!_ExitProcess+43    
kernel32!ExitProcess+14    
msvcrt!__crtExitProcess+32    
msvcrt!_cinit+d2    
msvcrt!exit+11    
php5ts!zend_mm_panic+24    
php5ts!_zend_mm_alloc_int+bb    
php5ts!_zend_mm_realloc_int+b6d    
php5ts!_erealloc+43    
php5ts!xbuf_format_converter+7c    
php5ts!vspprintf+29    
php5ts!php_error_cb+3a    
php_soap!soap_error_handler+9c    
php5ts!zend_error+43e    
php5ts!_zval_internal_dtor+33    
php5ts!_zval_internal_ptr_dtor+1d    
php5ts!zend_hash_destroy+27    
php5ts!delete_internal_hashtable+d    
php5ts!zend_hash_destroy+27    
php5ts!php_win32_core_globals_dtor+3c    
php5ts!ts_free_thread+85    
php5isapi!DllMain+17    
php5isapi!_DllMainCRTStartup+50    
ntdll!LdrpCallInitRoutine+14    
ntdll!LdrShutdownThread+d2    
kernel32!ExitThread+2f    
kernel32!FreeLibraryAndExitThread+40    
w3tp!THREAD_MANAGER::ThreadManagerThread+59    
kernel32!BaseThreadStart+34
 [2008-12-27 03:37 UTC] w dot ashcroft at redfoxuk dot com
Made a mistake in the DebugDiag summary, it is actually:

In w3wp.exe__PID__1652.dmp the assembly instruction at php5ts!zend_hash_del_key_or_index+10a in \\?\C:\PHP5\php\php5ts.dll from The PHP Group has caused an access violation exception (0xC0000005) when trying to write to memory location 0x0003213c on thread 0
 [2008-12-27 10:11 UTC] pajoye@php.net
We need a script as well.

By the way, ever considered fastcgi instead of ISAPI?
 [2008-12-28 11:09 UTC] w dot ashcroft at redfoxuk dot com
I can't provide a script as the server is full of PHP based websites so the cause/trigger is unknown.

Yes, but this particular server requires the ISAPI filter.
 [2008-12-28 12:20 UTC] pajoye@php.net
FCGI works with IIS6 and IIS7, see http://www.iis.net/php

Without a reproduce script, there is no chance to even have a diagnostic of your crash.
 [2008-12-29 03:41 UTC] w dot ashcroft at redfoxuk dot com
Doesn't the backtrace provide any clues?
 [2008-12-29 11:06 UTC] pajoye@php.net
No, it does not, this is a very common place, called by almost every single script. But it will when we have a reproduce script.
 [2009-01-06 01:00 UTC] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 
PHP Copyright © 2001-2022 The PHP Group
All rights reserved.
Last updated: Wed Aug 17 10:05:45 2022 UTC