php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #52965 PHP crashes while executing code which works on 5.2 & 5.3
Submitted: 2010-10-01 18:32 UTC Modified: 2013-02-18 00:34 UTC
From: php-bugs at majkl578 dot cz Assigned:
Status: No Feedback Package: Reproducible crash
PHP Version: trunk-SVN-2010-10-01 (snap) OS: Linux Debian
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: php-bugs at majkl578 dot cz
New email:
PHP Version: OS:

 

 [2010-10-01 18:32 UTC] php-bugs at majkl578 dot cz
Description:
------------
PHP-trunk crashes while executing code which works on 5.2 & 5.3.

Test script:
---------------
1. Download Nette Framework: http://files.nette.org/NetteFramework-2.0alpha-PHP5.3.zip
2. Extract it to root of your WWW dir
3. chmod 0777 <www dir>/NetteFramework-2.0dev-PHP5.3 -R     //easiest way for testing purposes
3. Go to http://127.0.0.1/NetteFramework-2.0dev-PHP5.3/examples/CD-collection/document_root/

Crash occurs, probably on this line: http://bit.ly/cU12zL.

Sorry, I was not able to reproduce it on a smaller piece of code, but I hope backtrace is enough. :/

Expected result:
----------------
no crash - welcome screen

Actual result:
--------------
Core was generated by `/usr/sbin/apache2 -k start'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007fbec0af8611 in spl_array_update_pos (intern=0x7fbec570a848) at /php/build/php-trunk-201010010030/ext/spl/spl_array.c:103
103			intern->pos_h = pos->h;
(gdb) bt
#0  0x00007fbec0af8611 in spl_array_update_pos (intern=0x7fbec570a848) at /php/build/php-trunk-201010010030/ext/spl/spl_array.c:103
#1  0x00007fbec0afb370 in spl_array_next_no_verify (intern=0x7fbec570a848, aht=0x7fbec571d978) at /php/build/php-trunk-201010010030/ext/spl/spl_array.c:837
#2  0x00007fbec0afb842 in spl_array_it_move_forward (iter=0x7fbec56a3348) at /php/build/php-trunk-201010010030/ext/spl/spl_array.c:962
#3  0x00007fbec0af2d46 in spl_dual_it_next (intern=0x7fbec573fb38, do_free=1) at /php/build/php-trunk-201010010030/ext/spl/spl_iterators.c:1529
#4  0x00007fbec0af3021 in zim_spl_dual_it_next (ht=0, return_value=0x7fbec56e6c68, return_value_ptr=0x7fffde131258, this_ptr=0x7fbec56147f0, 
    return_value_used=1) at /php/build/php-trunk-201010010030/ext/spl/spl_iterators.c:1615
#5  0x00007fbec0c8f426 in zend_call_function (fci=0x7fffde131280, fci_cache=0x7fffde131210) at /php/build/php-trunk-201010010030/Zend/zend_execute_API.c:978
#6  0x00007fbec0cc25bf in zend_call_method (object_pp=0x7fffde131340, obj_ce=0x7fbec570b1e0, fn_proxy=0x7fbec570b388, function_name=0x7fbec1209598 "next", 
    function_name_len=4, retval_ptr_ptr=0x0, param_count=0, arg1=0x0, arg2=0x0) at /php/build/php-trunk-201010010030/Zend/zend_interfaces.c:97
#7  0x00007fbec0cc2db7 in zend_user_it_move_forward (_iter=0x7fbec571dab8) at /php/build/php-trunk-201010010030/Zend/zend_interfaces.c:250
#8  0x00007fbec0aed5af in spl_recursive_it_move_forward_ex (object=0x7fbec56e4f70, zthis=0x7fbec56db9c8)
    at /php/build/php-trunk-201010010030/ext/spl/spl_iterators.c:207
#9  0x00007fbec0aee106 in spl_recursive_it_move_forward (iter=0x7fbec5619b20) at /php/build/php-trunk-201010010030/ext/spl/spl_iterators.c:387
#10 0x00007fbec0d1ab45 in ZEND_FE_FETCH_SPEC_VAR_HANDLER (execute_data=0x7fbec4b86bf8) at /php/build/php-trunk-201010010030/Zend/zend_vm_execute.h:11260
#11 0x00007fbec0ce214b in execute (op_array=0x7fbec55fba88) at /php/build/php-trunk-201010010030/Zend/zend_vm_execute.h:410
#12 0x00007fbec0ca3433 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /php/build/php-trunk-201010010030/Zend/zend.c:1195
#13 0x00007fbec0c10917 in php_execute_script (primary_file=0x7fffde133be0) at /php/build/php-trunk-201010010030/main/main.c:2329
#14 0x00007fbec0dec50b in php_handler (r=0x7fbec5626aa0) at /php/build/php-trunk-201010010030/sapi/apache2handler/sapi_apache2.c:667
#15 0x00007fbec4c1b880 in ap_run_handler (r=0x7fbec5626aa0) at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/config.c:159
#16 0x00007fbec4c1f21e in ap_invoke_handler (r=0x7fbec5626aa0) at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/config.c:377
#17 0x00007fbec4c2ce48 in ap_process_request (r=0x7fbec5626aa0)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/modules/http/http_request.c:282
#18 0x00007fbec4c29cf8 in ap_process_http_connection (c=0x7fbec55d0b20)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/modules/http/http_core.c:190
#19 0x00007fbec4c23478 in ap_run_process_connection (c=0x7fbec55d0b20) at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/connection.c:43
#20 0x00007fbec4c31807 in child_main (child_num_arg=<value optimized out>)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/mpm/prefork/prefork.c:662
#21 0x00007fbec4c31b1a in make_child (s=0x7fbec5218938, slot=3)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/mpm/prefork/prefork.c:758
#22 0x00007fbec4c327a4 in perform_idle_server_maintenance (_pconf=<value optimized out>, plog=<value optimized out>, s=<value optimized out>)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/mpm/prefork/prefork.c:893
#23 ap_mpm_run (_pconf=<value optimized out>, plog=<value optimized out>, s=<value optimized out>)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/mpm/prefork/prefork.c:1097
#24 0x00007fbec4c07a90 in main (argc=3, argv=0x7fffde134268) at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/main.c:742

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2011-07-10 14:32 UTC] felipe@php.net
-Status: Open +Status: Feedback
 [2011-07-10 14:32 UTC] felipe@php.net
Please try using this snapshot:

  http://snaps.php.net/php-trunk-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/


 [2013-02-18 00:34 UTC] php-bugs at lists dot php dot net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.
 
PHP Copyright © 2001-2022 The PHP Group
All rights reserved.
Last updated: Mon May 23 21:03:42 2022 UTC