Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.

Any chance you could extract a simple reproducing case from that code?  It is obviously related to the call_user_func_array() call there, so if you could figure out the exact arguments to the call and create a simple test case that causes the crash it would speed this up.

I tried to reproduce it, fetched the tree, configured the database, the application didn't properly run but didn'T segfault.

Running fro mthe command line as in your backtrace gave me some HTML output. So please try to make the scrit shorter so we have a chance to understand it.

A good starting point might be a PHP-level backtrace to generate this we have a .gdbinit file with a dump_bt macro.

source /path/to/php-src/.gdbinit
help dump_bt

Should get oyu started there.

Thanks!

Thanks for your help rasmus and johannes, I thought it was going to be very difficult to isolate this bug in a sample script, but with the help of dump_bt, it was not so hard. Thanks for that advice!

Here's a sample script which exposes the bug I think I'm experiencing in our project. It works in 5.2 but segfaults in 5.3.

<?php

class A
{
  public function x()
  {
  }
}

class B extends A
{
  public function x()
  {
    $args = func_get_args();

    return call_user_func_array(array($this, 'parent::x'), $args);
  }
}

class C extends B
{
}

$c = new C;
$c->x();

Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

Thanks for the report. From the UPGRADING:

    call_user_func() now propagates $this even if the callee is
    the parent class

This includes the class to which the call is relative, might not be clear from the entry.

The fix for the code would be replacing parent::x with A::x.

Thanks for the report, I'll try to come up with a more clear wording for UPGRADING and other documentation.