PHP :: Bug #49559 :: php: free(): invalid pointer: 0x0a48f6b0 ***

Bug #49559	php: free(): invalid pointer: 0x0a48f6b0 ***
Submitted:	2009-09-15 06:16 UTC	Modified:	2009-09-22 10:19 UTC
From:	12985462 at QQ dot com	Assigned:
Status:	Not a bug	Package:	CGI/CLI related
PHP Version:	5.2.10	OS:	CentOS 5.3 32bit
Private report:	No	CVE-ID:	None

View Developer Edit

[2009-09-15 06:16 UTC] 12985462 at QQ dot com

Description:
------------
OS:CentOS 5.3
CPU:Intel(R) Core(TM)2 Quad  CPU   Q9300  @ 2.50GHz
MEM:256M
PHP Version:PHP 5.2.10 + Zend Optimizer v3.3.9 
-------------------------
SELinux is disabled!!!
-------------------------
Compiler : icc -V
Intel(R) C Compiler for applications running on IA-32, Version 10.1    Build 20090817 Package ID: l_cc_p_10.1.025
Copyright (C) 1985-2009 Intel Corporation.  All rights reserved.
FOR NON-COMMERCIAL USE ONLY

-------------------------
gcc -v
Using built-in specs.
Target: i386-redhat-linux
Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --enable-shared --enable-threads=posix --enable-checking=release --with-system-zlib --enable-__cxa_atexit --disable-libunwind-exceptions --enable-libgcj-multifile --enable-languages=c,c++,objc,obj-c++,java,fortran,ada --enable-java-awt=gtk --disable-dssi --enable-plugin --with-java-home=/usr/lib/jvm/java-1.4.2-gcj-1.4.2.0/jre --with-cpu=generic --host=i386-redhat-linux
Thread model: posix
gcc version 4.1.2 20080704 (Red Hat 4.1.2-44)
---------------------------
compiling with

CC=icc CXX=icpc CFLAGS='-O2 -unroll2 -ip -fp-model source -restrict -xW ' CXXFLAGS='-O2 -unroll2 -ip -fp-model source  -restrict -fno-implicit-templates -fno-exceptions -fno-rtti  -xW ' ./configure --prefix=/var/webserver/php --with-config-file-path=/var/webserver/php/etc --with-mysql=/var/webserver/mysql --with-mysqli=/var/webserver/mysql/bin/mysql_config --with-iconv-dir=/usr/local --with-freetype-dir --with-jpeg-dir --with-png-dir --with-zlib --with-libxml-dir=/usr --enable-xml --disable-rpath --enable-discard-path --enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization --with-curl --with-curlwrappers --enable-mbregex --enable-fastcgi --enable-fpm --enable-force-cgi-redirect --enable-mbstring --with-gd --enable-gd-native-ttf --with-openssl --enable-pcntl --enable-sockets --with-mcrypt --with-mhash --without-pear --disable-debug --disable-ipv6
----------------------------------------------------
php.ini

[Zend]
zend_extension="/var/webserver/zend/ZendOptimizer.so"
zend_optimizer.optimization_level=1023
----------------------------------------------------

        ldd /var/webserver/php/bin/php
        libcrypt.so.1 => /lib/libcrypt.so.1 (0xb7f8f000)
        librt.so.1 => /lib/librt.so.1 (0xb7f86000)
        libmhash.so.2 => /usr/lib/libmhash.so.2 (0xb7f3f000)
        libmcrypt.so.4 => /usr/lib/libmcrypt.so.4 (0xb7f0c000)
        libfreetype.so.6 => /usr/lib/libfreetype.so.6 (0xb7e8c000)
        libpng12.so.0 => /usr/lib/libpng12.so.0 (0xb7e66000)
        libz.so.1 => /usr/lib/libz.so.1 (0xb7e52000)
        libjpeg.so.62 => /usr/lib/libjpeg.so.62 (0xb7e30000)
        libcurl.so.3 => /usr/lib/libcurl.so.3 (0xb7df4000)
        libresolv.so.2 => /lib/libresolv.so.2 (0xb7de1000)
        libimf.so => /opt/intel/cc/10.1.025/lib/libimf.so (0xb7bb1000)
        libm.so.6 => /lib/libm.so.6 (0xb7b8a000)
        libnsl.so.1 => /lib/libnsl.so.1 (0xb7b72000)
        libxml2.so.2 => /usr/lib/libxml2.so.2 (0xb7a40000)
        libssl.so.6 => /lib/libssl.so.6 (0xb79f9000)
        libcrypto.so.6 => /lib/libcrypto.so.6 (0xb78b9000)
        libdl.so.2 => /lib/libdl.so.2 (0xb78b5000)
        libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0xb7888000)
        libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0xb77f1000)
        libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0xb77cb000)
        libcom_err.so.2 => /lib/libcom_err.so.2 (0xb77c8000)
        libidn.so.11 => /usr/lib/libidn.so.11 (0xb7797000)
        libmysqlclient.so.16 => /var/webserver/mysql/lib/mysql/libmysqlclient.so.16 (0xb7641000)
        libtcmalloc_minimal.so.0 => /usr/local/lib/libtcmalloc_minimal.so.0 (0xb760e000)
        libiconv.so.2 => /usr/local/lib/libiconv.so.2 (0xb7510000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xb7504000)
        libc.so.6 => /lib/libc.so.6 (0xb73c0000)
        libpthread.so.0 => /lib/libpthread.so.0 (0xb73a9000)
        /lib/ld-linux.so.2 (0xb7fc7000)
        libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0xb739f000)
        libkeyutils.so.1 => /lib/libkeyutils.so.1 (0xb739c000)
        libintlc.so.5 => /opt/intel/cc/10.1.025/lib/libintlc.so.5 (0xb7358000)
        libstdc++.so.6 => /usr/lib/libstdc++.so.6 (0xb726f000)
        libselinux.so.1 => /lib/libselinux.so.1 (0xb7257000)
        libsepol.so.1 => /lib/libsepol.so.1 (0xb7210000)

Expected result:
----------------
/var/webserver/php/bin/php -v
*** glibc detected *** /var/webserver/php/bin/php: free(): invalid pointer: 0x0a48f6b0 ***
======= Backtrace: =========
/lib/libc.so.6[0xb74210f1]
/lib/libc.so.6(cfree+0x90)[0xb7424bc0]
/var/webserver/zend/ZendOptimizer.so[0xb70d0111]
======= Memory map: ========
08048000-0869e000 r-xp 00000000 08:03 53182695                           /var/webserver/php/bin/php
0869e000-086d1000 rw-p 00656000 08:03 53182695                           /var/webserver/php/bin/php
086d1000-086db000 rw-p 086d1000 00:00 0
0a2d4000-0a574000 rw-p 0a2d4000 00:00 0                                  [heap]
b701a000-b709a000 rw-s 00000000 00:40 0
b709a000-b70a3000 r-xp 00000000 08:03 52071567                           /lib/libnss_files-2.5.so
b70a3000-b70a4000 r--p 00008000 08:03 52071567                           /lib/libnss_files-2.5.so
b70a4000-b70a5000 rw-p 00009000 08:03 52071567                           /lib/libnss_files-2.5.so
b70a5000-b71f0000 r-xp 00000000 08:03 53182687                           /var/webserver/zend/ZendOptimizer.so
b71f0000-b7201000 rw-p 0014b000 08:03 53182687                           /var/webserver/zend/ZendOptimizer.so
b7201000-b7208000 rw-p b7201000 00:00 0
b7208000-b7243000 r-xp 00000000 08:03 52071756                           /lib/libsepol.so.1
b7243000-b7244000 rw-p 0003a000 08:03 52071756                           /lib/libsepol.so.1
b7244000-b724f000 rw-p b7244000 00:00 0
b724f000-b7265000 r-xp 00000000 08:03 52072821                           /lib/libselinux.so.1
b7265000-b7267000 rw-p 00015000 08:03 52072821                           /lib/libselinux.so.1
b7267000-b7345000 r-xp 00000000 08:03 52073268                           /usr/lib/libstdc++.so.6.0.8
b7345000-b7348000 r--p 000dd000 08:03 52073268                           /usr/lib/libstdc++.so.6.0.8
b7348000-b734a000 rw-p 000e0000 08:03 52073268                           /usr/lib/libstdc++.so.6.0.8
b734a000-b7350000 rw-p b734a000 00:00 0
b7350000-b7391000 r-xp 00000000 08:03 52366545                           /opt/intel/cc/10.1.025/lib/libintlc.so.5
b7391000-b7393000 rw-p 00041000 08:03 52366545                           /opt/intel/cc/10.1.025/lib/libintlc.so.5
b7393000-b7394000 rw-p b7393000 00:00 0
b7394000-b7396000 r-xp 00000000 08:03 52072569                           /lib/libkeyutils-1.2.so
b7396000-b7397000 rw-p 00001000 08:03 52072569                           /lib/libkeyutils-1.2.so
b7397000-b739f000 r-xp 00000000 08:03 52073384                           /usr/lib/libkrb5support.so.0.1
b739f000-b73a0000 rw-p 00007000 08:03 52073384                           /usr/lib/libkrb5support.so.0.1
b73a0000-b73a1000 rw-p b73a0000 00:00 0
b73a1000-b73b4000 r-xp 00000000 08:03 52071713                           /lib/libpthread-2.5.so
b73b4000-b73b5000 r--p 00012000 08:03 52071713                           /lib/libpthread-2.5.so
b73b5000-b73b6000 rw-p 00013000 08:03 52071713                           /lib/libpthread-2.5.so
b73b6000-b73b8000 rw-p b73b6000 00:00 0
b73b8000-b74f6000 r-xp 00000000 08:03 52071634                           /lib/libc-2.5.so
b74f6000-b74f8000 r--p 0013e000 08:03 52071634                           /lib/libc-2.5.so
b74f8000-b74f9000 rw-p 00140000 08:03 52071634                           /lib/libc-2.5.so
b74f9000-b74fc000 rw-p b74f9000 00:00 0
b74fc000-b7507000 r-xp 00000000 08:03 52076812                           /lib/libgcc_s-4.1.2-20080825.so.1
b7507000-b7508000 rw-p 0000a000 08:03 52076812                           /lib/libgcc_s-4.1.2-20080825.so.1
b7508000-b7604000 r-xp 00000000 08:03 52077133                           /usr/local/lib/libiconv.so.2.5.0
b7604000-b7606000 rw-p 000fc000 08:03 52077133                           /usr/local/lib/libiconv.so.2.5.0
b7606000-b761f000 r-xp 00000000 08:03 52073338                           /usr/local/lib/libtcmalloc_minimal.so.0.0.0
b761f000-b7620000 rw-p 00019000 08:03 52073338                           /usr/local/lib/libtcmalloc_minimal.so.0.0.0
b7620000-b7639000 rw-p b7620000 00:00 0
b7639000-b7688000 r-xp 00000000 08:03 53020729                           /var/webserver/mysql/lib/mysql/libmysqlclient.so.16.0.0
b7688000-b778e000 rw-p 0004f000 08:03 53020729                           /var/webserver/mysql/lib/mysql/libmysqlclient.so.16.0.0
b778e000-b778f000 rw-p b778e000 00:00 0
b778f000-b77bf000 r-xp 00000000 08:03 52073236                           /usr/lib/libidn.so.11.5.19
b77bf000-b77c0000 rw-p 0002f000 08:03 52073236                           /usr/lib/libidn.so.11.5.19
b77c0000-b77c2000 r-xp 00000000 08:03 52071737                           /lib/libcom_err.so.2.1
b77c2000-b77c3000 rw-p 00001000 08:03 52071737                           /lib/libcom_err.so.2.1
b77c3000-b77e8000 r-xp 00000000 08:03 52075775                           /usr/lib/libk5crypto.so.3.1
b77e8000-b77e9000 rw-p 00025000 08:03 52075775                           /usr/lib/libk5crypto.so.3.1
b77e9000-b787c000 r-xp 00000000 08:03 52073194                           /usr/lib/libkrb5.so.3.3
b787c000-b787f000 rw-p 00092000 08:03 52073194                           /usr/lib/libkrb5.so.3.3
b787f000-b7880000 rw-p b787f000 00:00 0
b7880000-b78ac000 r-xp 00000000 08:03 52073170                           /usr/lib/libgssapi_krb5.so.2.2
b78ac000-b78ad000 rw-p 0002c000 08:03 52073170                           /usr/lib/libgssapi_krb5.so.2.2
b78ad000-b78af000 r-xp 00000000 08:03 52071769                           /lib/libdl-2.5.so
b78af000-b78b0000 r--p 00001000 08:03 52071769                           /lib/libdl-2.5.so
b78b0000-b78b1000 rw-p 00002000 08:03 52071769                           /lib/libdl-2.5.so
b78b1000-b79da000 r-xp 00000000 08:03 52076887                           /lib/libcrypto.so.0.9.8e
b79da000-b79ed000 rw-p 00129000 08:03 52076887                           /lib/libcrypto.so.0.9.8e
b79ed000-b79f1000 rw-p b79ed000 00:00 0
b79f1000-b7a34000 r-xp 00000000 08:03 52071547                           /lib/libssl.so.0.9.8e
b7a34000-b7a38000 rw-p 00042000 08:03 52071547                           /lib/libssl.so.0.9.8e
b7a38000-b7b64000 r-xp 00000000 08:03 52073503                           /usr/lib/libxml2.so.2.6.26
b7b64000-b7b69000 rw-p 0012c000 08:03 52073503                           /usr/lib/libxml2.so.2.6.26
b7b69000-b7b6a000 rw-p b7b69000 00:00 0
b7b6a000-b7b7d000 r-xp 00000000 08:03 52071569                           /lib/libnsl-2.5.so
b7b7d000-b7b7e000 r--p 00012000 08:03 52071569                           /lib/libnsl-2.5.so
b7b7e000-b7b7f000 rw-p 00013000 08:03 52071569                           /lib/libnsl-2.5.so
b7b7f000-b7b82000 rw-p b7b7f000 00:00 0
b7b82000-b7ba7000 r-xp 00000000 08:03 52071556                           /lib/libm-2.5.so
b7ba7000-b7ba8000 r--p 00024000 08:03 52071556                           /lib/libm-2.5.so
b7ba8000-b7ba9000 rw-p 00025000 08:03 52071556                           /lib/libm-2.5.so
b7ba9000-b7dd6000 r-xp 00000000 08:03 52366543                           /opt/intel/cc/10.1.025/lib/libimf.so
b7dd6000-b7dd9000 rw-p 0022c000 08:03 52366543                           /opt/intel/cc/10.1.025/lib/libimf.so
b7dd9000-b7de8000 r-xp 00000000 08:03 52071728                           /lib/libresolv-2.5.so
b7de8000-b7de9000 r--p 0000e000 08:03 52071728                           /lib/libresolv-2.5.so
b7de9000-b7dea000 rw-p 0000f000 08:03 52071728                           /lib/libresolv-2.5.so
b7dea000-b7dec000 rw-p b7dea000 00:00 0
b7dec000-b7e27000 r-xp 00000000 08:03 52073460                           /usr/lib/libcurl.so.3.0.0
b7e27000-b7e28000 rw-p 0003b000 08:03 52073460                           /usr/lib/libcurl.so.3.0.0
b7e28000-b7e49000 r-xp 00000000 08:03 52073245                           /usr/lib/libjpeg.so.62.0.0
b7e49000-b7e4a000 rw-p 00020000 08:03 52073245                           /usr/lib/libjpeg.so.62.0.0
b7e4a000-b7e5c000 r-xp 00000000 08:03 52073227                           /usr/lib/libz.so.1.2.3
b7e5c000-b7e5d000 rw-p 00011000 08:03 52073227                           /usr/lib/libz.so.1.2.3
b7e5d000-b7e5e000 rw-p b7e5d000 00:00 0
b7e5e000-b7e83000 r-xp 00000000 08:03 52073431                           /usr/lib/libpng12.so.0.10.0
b7e83000-b7e84000 rw-p 00024000 08:03 52073431                           /usr/lib/libpng12.so.0.10.0
b7e84000-b7f01000 r-xp 00000000 08:03 52073440                           /usr/lib/libfreetype.so.6.3.10
b7f01000-b7f04000 rw-p 0007d000 08:03 52073440                           /usr/lib/libfreetype.so.6.3.10
b7f04000-b7f2f000 r-xp 00000000 08:03 52077147                           /usr/lib/libmcrypt.so.4.4.8
b7f2f000-b7f32000 rw-p 0002b000 08:03 52077147                           /usr/lib/libmcrypt.so.4.4.8
b7f32000-b7f37000 rw-p b7f32000 00:00 0
b7f37000-b7f7d000 r-xp 00000000 08:03 52077152                           /usr/lib/libmhash.so.2.0.1
b7f7d000-b7f7e000 rw-p 00046000 08:03 52077152                           /usr/lib/libmhash.so.2.0.1
b7f7e000-b7f85000 r-xp 00000000 08:03 52071757                           /lib/librt-2.5.so
b7f85000-b7f86000 r--p 00006000 08:03 52071757                           /lib/librt-2.5.so
b7f86000-b7f87000 rw-p 00007000 08:03 52071757                           /lib/librt-2.5.so
b7f87000-b7f90000 r-xp 00000000 08:03 52071770                           /lib/libcrypt-2.5.so
b7f90000-b7f91000 r--p 00008000 08:03 52071770                           /lib/libcrypt-2.5.so
b7f91000-b7f92000 rw-p 00009000 08:03 52071770                           /lib/libcrypt-2.5.so
b7f92000-b7fba000 rw-p b7f92000 00:00 0
b7fbe000-b7fbf000 rw-p b7fbe000 00:00 0
b7fbf000-b7fd9000 r-xp 00000000 08:03 52071722                           /lib/ld-2.5.so
b7fd9000-b7fda000 r--p 00019000 08:03 52071722                           /lib/ld-2.5.so
b7fda000-b7fdb000 rw-p 0001a000 08:03 52071722                           /lib/ld-2.5.so
bf8c6000-bf8da000 rwxp 7ffffffea000 00:00 0                              [stack]
bf8da000-bf8db000 rw-p 7fffffffe000 00:00 0
Aborted
-----------------------------------------

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

[2009-09-15 06:19 UTC] pajoye@php.net

Please remove the Zend optimizer and try again.

[2009-09-15 10:56 UTC] 12985462 at QQ dot com

Zend optimizer Removed ,it's working!

[2009-09-16 03:15 UTC] 12985462 at QQ dot com

Fixed! I have remake mysql with '--disable-thread-safe-client' Zend Optimizer it's working!!with '--enable-thread-safe-client' Zend Optimizer it's can't working. In Zend 3.3.9 don't support thread-safe,The Zend 3.3.9 don't include TS edition.


working :

./configure  --prefix='/var/webserver/mysql' '--libexecdir=/var/webserver/mysql/bin'  '--with-comment=MySQL Server XTM Edition(GPL)''--disable-thread-safe-client' '--enable-local-infile' '--enable-assembler' '--with-pic' '--with-readline' '--without-debug' '--with-unix-socket-path=/tmp/mysqld.sock' '--with-extra-charsets=complex' CFLAGS='-O2 -unroll2 -ip  -xW' CXXFLAGS='-O2 -unroll2 -ip -fno-implicit-templates -fno-exceptions -fno-rtti -xW' '--with-low-memory' '--without-server' && make

[2009-09-16 03:21 UTC] 1298462 at QQ dot com

and if who want to goolge tcmalloc,please don't link tcmalloc to mysql client.

if your mysql client with '--enable-thread-safe-client' with/without tcmalloc ,the zend optimizer it's can't working.

if you mysql clinet with '--disable-thread-safe-client' and without google tcmalloc, the zend optimizer it's working.

Tested on centos 5.3 32bit and ubuntu server 9.04 64bit.

[2009-09-22 10:19 UTC] jani@php.net

Sorry, but your problem does not imply a bug in PHP itself.  For a
list of more appropriate places to ask for help using PHP, please
visit http://www.php.net/support.php as this bug system is not the
appropriate forum for asking support questions.  Due to the volume
of reports we can not explain in detail here why your report is not
a bug.  The support channels will be able to provide an explanation
for you.

Thank you for your interest in PHP.

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2025 The PHP Group All rights reserved.	Last updated: Wed Jul 02 00:01:34 2025 UTC