php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #52965 PHP crashes while executing code which works on 5.2 & 5.3
Submitted: 2010-10-01 18:32 UTC Modified: 2013-02-18 00:34 UTC
From: php-bugs at majkl578 dot cz Assigned:
Status: No Feedback Package: Reproducible crash
PHP Version: trunk-SVN-2010-10-01 (snap) OS: Linux Debian
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If this is not your bug, you can add a comment by following this link.
If this is your bug, but you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: php-bugs at majkl578 dot cz
New email:
PHP Version: OS:

 

 [2010-10-01 18:32 UTC] php-bugs at majkl578 dot cz 
Description:
------------
PHP-trunk crashes while executing code which works on 5.2 & 5.3.

Test script:
---------------
1. Download Nette Framework: http://files.nette.org/NetteFramework-2.0alpha-PHP5.3.zip
2. Extract it to root of your WWW dir
3. chmod 0777 <www dir>/NetteFramework-2.0dev-PHP5.3 -R     //easiest way for testing purposes
3. Go to http://127.0.0.1/NetteFramework-2.0dev-PHP5.3/examples/CD-collection/document_root/

Crash occurs, probably on this line: http://bit.ly/cU12zL.

Sorry, I was not able to reproduce it on a smaller piece of code, but I hope backtrace is enough. :/

Expected result:
----------------
no crash - welcome screen

Actual result:
--------------
Core was generated by `/usr/sbin/apache2 -k start'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007fbec0af8611 in spl_array_update_pos (intern=0x7fbec570a848) at /php/build/php-trunk-201010010030/ext/spl/spl_array.c:103
103			intern->pos_h = pos->h;
(gdb) bt
#0  0x00007fbec0af8611 in spl_array_update_pos (intern=0x7fbec570a848) at /php/build/php-trunk-201010010030/ext/spl/spl_array.c:103
#1  0x00007fbec0afb370 in spl_array_next_no_verify (intern=0x7fbec570a848, aht=0x7fbec571d978) at /php/build/php-trunk-201010010030/ext/spl/spl_array.c:837
#2  0x00007fbec0afb842 in spl_array_it_move_forward (iter=0x7fbec56a3348) at /php/build/php-trunk-201010010030/ext/spl/spl_array.c:962
#3  0x00007fbec0af2d46 in spl_dual_it_next (intern=0x7fbec573fb38, do_free=1) at /php/build/php-trunk-201010010030/ext/spl/spl_iterators.c:1529
#4  0x00007fbec0af3021 in zim_spl_dual_it_next (ht=0, return_value=0x7fbec56e6c68, return_value_ptr=0x7fffde131258, this_ptr=0x7fbec56147f0, 
    return_value_used=1) at /php/build/php-trunk-201010010030/ext/spl/spl_iterators.c:1615
#5  0x00007fbec0c8f426 in zend_call_function (fci=0x7fffde131280, fci_cache=0x7fffde131210) at /php/build/php-trunk-201010010030/Zend/zend_execute_API.c:978
#6  0x00007fbec0cc25bf in zend_call_method (object_pp=0x7fffde131340, obj_ce=0x7fbec570b1e0, fn_proxy=0x7fbec570b388, function_name=0x7fbec1209598 "next", 
    function_name_len=4, retval_ptr_ptr=0x0, param_count=0, arg1=0x0, arg2=0x0) at /php/build/php-trunk-201010010030/Zend/zend_interfaces.c:97
#7  0x00007fbec0cc2db7 in zend_user_it_move_forward (_iter=0x7fbec571dab8) at /php/build/php-trunk-201010010030/Zend/zend_interfaces.c:250
#8  0x00007fbec0aed5af in spl_recursive_it_move_forward_ex (object=0x7fbec56e4f70, zthis=0x7fbec56db9c8)
    at /php/build/php-trunk-201010010030/ext/spl/spl_iterators.c:207
#9  0x00007fbec0aee106 in spl_recursive_it_move_forward (iter=0x7fbec5619b20) at /php/build/php-trunk-201010010030/ext/spl/spl_iterators.c:387
#10 0x00007fbec0d1ab45 in ZEND_FE_FETCH_SPEC_VAR_HANDLER (execute_data=0x7fbec4b86bf8) at /php/build/php-trunk-201010010030/Zend/zend_vm_execute.h:11260
#11 0x00007fbec0ce214b in execute (op_array=0x7fbec55fba88) at /php/build/php-trunk-201010010030/Zend/zend_vm_execute.h:410
#12 0x00007fbec0ca3433 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /php/build/php-trunk-201010010030/Zend/zend.c:1195
#13 0x00007fbec0c10917 in php_execute_script (primary_file=0x7fffde133be0) at /php/build/php-trunk-201010010030/main/main.c:2329
#14 0x00007fbec0dec50b in php_handler (r=0x7fbec5626aa0) at /php/build/php-trunk-201010010030/sapi/apache2handler/sapi_apache2.c:667
#15 0x00007fbec4c1b880 in ap_run_handler (r=0x7fbec5626aa0) at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/config.c:159
#16 0x00007fbec4c1f21e in ap_invoke_handler (r=0x7fbec5626aa0) at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/config.c:377
#17 0x00007fbec4c2ce48 in ap_process_request (r=0x7fbec5626aa0)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/modules/http/http_request.c:282
#18 0x00007fbec4c29cf8 in ap_process_http_connection (c=0x7fbec55d0b20)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/modules/http/http_core.c:190
#19 0x00007fbec4c23478 in ap_run_process_connection (c=0x7fbec55d0b20) at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/connection.c:43
#20 0x00007fbec4c31807 in child_main (child_num_arg=<value optimized out>)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/mpm/prefork/prefork.c:662
#21 0x00007fbec4c31b1a in make_child (s=0x7fbec5218938, slot=3)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/mpm/prefork/prefork.c:758
#22 0x00007fbec4c327a4 in perform_idle_server_maintenance (_pconf=<value optimized out>, plog=<value optimized out>, s=<value optimized out>)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/mpm/prefork/prefork.c:893
#23 ap_mpm_run (_pconf=<value optimized out>, plog=<value optimized out>, s=<value optimized out>)
    at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/mpm/prefork/prefork.c:1097
#24 0x00007fbec4c07a90 in main (argc=3, argv=0x7fffde134268) at /build/buildd-apache2_2.2.16-2-amd64-LRWSBR/apache2-2.2.16/server/main.c:742

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2011-07-10 14:32 UTC] felipe@php.net
-Status: Open +Status: Feedback
 [2011-07-10 14:32 UTC] felipe@php.net 
Please try using this snapshot:

  http://snaps.php.net/php-trunk-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/
 [2013-02-18 00:34 UTC] php-bugs at lists dot php dot net 
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Apr 25 19:01:33 2024 UTC