php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #49192 PHP crashes when GC invoked on COM object
Submitted: 2009-08-07 17:03 UTC Modified: 2010-04-02 11:06 UTC
Votes:1
Avg. Score:4.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:0 (0.0%)
From: circus2 at freenet dot de Assigned: stas
Status: Closed Package: Reproducible crash
PHP Version: 5.3SVN-2009-08-07 (snap) OS: Win XP SP3 (german)
Private report: No CVE-ID:
 [2009-08-07 17:03 UTC] circus2 at freenet dot de
Description:
------------
When running the sample code PHP 5.3 and PHP 5.3 latest snapshot crash with Win32 exception.

It was reproducable on two different machines. But you need the MS Access Jet Engine to work with this sample code (means you probably need MS Access).

With php 5.2.10 it runs like expected - no exceptions, no errors.

Reproduce code:
---------------
http://www.tahat.de/Error3.zip

Expected result:
----------------
nothing special here - just works with 5.2.10

Actual result:
--------------
Win32 exception crashes php.exe

Thread 0 - System ID 2984
Entry point   php+2fa2 
Create time   07.08.2009 18:25:36 
Time spent in user mode   0 Days 0:0:0.380 
Time spent in kernel mode   0 Days 0:0:0.140 

Function     Arg 1     Arg 2     Arg 3   Source 
php5ts!gc_remove_zval_from_buffer+365     00393128     0ac44ea0     00000005    
php5ts!gc_remove_zval_from_buffer+425     0ac44ea0     01247500     00393128    
php5ts!gc_collect_cycles+6a     00393128     00000001     0aa95fb0    
php5ts!gc_zval_possible_root+e9     0ac44ea0     00393128     00393128    
php5ts!zval_ptr_dtor+93     00c0fb90     00393128     01160548    
php5ts!execute+39293     00393128     00c0fc1c     00000000    
php5ts!execute+298     01132778     00393100     00393128    
php5ts!zend_execute_scripts+fe     00000008     00393128     00000000    
php5ts!php_execute_script+231     00397038     0138b8a0     00000099    
php5ts!zend_register_constant+a9     00c0fdf8     00393128     00404e60    
php+1780     1000c24e     00396028     004017d4    
php5ts!efree+9     00396028     004017d4     01131390    
php5ts!efree+2e     01131390     00393128     003930c4    
php+17d4     00c0fecc     00393128     0040742c    
php+24ab     0000006e     00000001     00000000    
msvcr90!_lock+177     2a644eb0     01ca1779     7ffd6000    
kernel32!BaseProcessStart+23     00402fa2     00000000     00000000    

PHP5TS!GC_REMOVE_ZVAL_FROM_BUFFER+365WARNING - DebugDiag was not able to locate debug symbols for php5ts.dll, so the information below may be incomplete.

In php__PID__876__Date__08_07_2009__Time_06_25_58PM__40__Second_Chance_Exception_C0000005.dmp the assembly instruction at php5ts!gc_remove_zval_from_buffer+365 in C:\[..]\php\php5ts.dll from The PHP Group has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000014 on thread 0


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-08-07 17:08 UTC] pajoye@php.net
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.


 [2009-08-15 01:00 UTC] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 [2009-08-28 15:38 UTC] FelixStrauss at gmx dot de
I can reproduce the problem with the following two lines:

<?php

$dbConnection = new Com('ADODB.Connection');
var_dump(gc_collect_cycles());

?>

My system:
Zend Extension Build API220090626,TS,VC9
PHP Extension Build API20090626,TS,VC9
 [2009-08-28 15:44 UTC] FelixStrauss at gmx dot de
In addition: My system is Windows 7 PR Build 7100
 [2010-04-02 00:28 UTC] stas@php.net
-Status: No Feedback +Status: Re-Opened
 [2010-04-02 00:35 UTC] stas@php.net
-Summary: PHP crashes with exception (reproduced with AdoDB and Access) +Summary: PHP crashes when GC invoked on COM object
 [2010-04-02 00:54 UTC] stas@php.net
Automatic comment from SVN on behalf of stas
Revision: http://svn.php.net/viewvc/?view=revision&amp;revision=297307
Log: fix #49192 - crash in GC when get_properties handler returns null
 [2010-04-02 00:54 UTC] stas@php.net
-Status: Re-Opened +Status: Closed -Assigned To: +Assigned To: stas
 [2010-04-02 00:54 UTC] stas@php.net
This bug has been fixed in SVN.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.


 [2010-04-02 07:51 UTC] yannick@php.net
-Status: Closed +Status: Re-Opened
 [2010-04-02 11:06 UTC] bjori@php.net
-Status: Re-Opened +Status: Closed
 [2012-04-03 11:29 UTC] ab@php.net
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=94cefaedaf36b681bdf03d89c761f642a28e33e0
Log: Fix bug #61481 Test Bug - ext/com_dotnet/tests/bug49192
 [2012-04-03 11:30 UTC] ab@php.net
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=c7e9c646eee25711cab04ee2d17390373baa53e5
Log: Fix bug #61481 Test Bug - ext/com_dotnet/tests/bug49192
 [2012-04-03 12:28 UTC] ab@php.net
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=94cefaedaf36b681bdf03d89c761f642a28e33e0
Log: Fix bug #61481 Test Bug - ext/com_dotnet/tests/bug49192
 [2012-04-18 09:45 UTC] laruence@php.net
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=c7e9c646eee25711cab04ee2d17390373baa53e5
Log: Fix bug #61481 Test Bug - ext/com_dotnet/tests/bug49192
 [2012-07-24 23:36 UTC] rasmus@php.net
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=c7e9c646eee25711cab04ee2d17390373baa53e5
Log: Fix bug #61481 Test Bug - ext/com_dotnet/tests/bug49192
 [2013-11-17 09:32 UTC] laruence@php.net
Automatic comment on behalf of ab
Revision: http://git.php.net/?p=php-src.git;a=commit;h=c7e9c646eee25711cab04ee2d17390373baa53e5
Log: Fix bug #61481 Test Bug - ext/com_dotnet/tests/bug49192
 
PHP Copyright © 2001-2014 The PHP Group
All rights reserved.
Last updated: Fri Apr 25 07:02:14 2014 UTC