php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #59767 free(): invalid pointer on php-fpm startup
Submitted: 2011-05-14 14:58 UTC Modified: 2011-08-10 09:49 UTC
From: Jared dot Williams at ntlworld dot com Assigned:
Status: Closed Package: APC (PECL)
PHP Version: Trunk SVN-2011-05-14 (dev) OS: Ubuntu x64 11.04
Private report: No CVE-ID: None
 [2011-05-14 14:58 UTC] Jared dot Williams at ntlworld dot com
Description:
------------
Configure line:
  Just --enable-debug for both PHP & APC

(gdb) bt
#0  0x00007ffff3e1dd05 in raise (sig=6) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00007ffff3e21ab6 in abort () at abort.c:92
#2  0x00007ffff3e56d7b in __libc_message (do_abort=2, 
fmt=0x7ffff3f3f400 "*** glibc detected *** %s: %s: 
0x%s ***\n")
    at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
#3  0x00007ffff3e62a8f in malloc_printerr (av=<value 
optimised out>, p=0x7ffff7e9c078) at malloc.c:6283
#4  _int_free (av=<value optimised out>, p=0x7ffff7e9c078) 
at malloc.c:4795
#5  0x00007ffff3e668e3 in __libc_free (mem=<value optimised 
out>) at malloc.c:3738
#6  0x00000000006cd485 in destroy_zend_class (pce=<value 
optimised out>)
    at /home/jared/Development/php-
trunk/Zend/zend_opcode.c:331
#7  0x00000000006e3acb in zend_hash_clean (ht=0xd3bc60) at 
/home/jared/Development/php-
trunk/Zend/zend_hash.c:581
#8  0x00007ffff3204c50 in apc_interned_strings_shutdown () 
at 
/home/jared/Development/apc/apc_string.c:226
#9  0x00007ffff31fe48a in apc_module_shutdown () at 
/home/jared/Development/apc/apc_main.c:895
#10 0x00007ffff31f3e0f in zm_shutdown_apc (type=<value 
optimised out>, module_number=37)
    at /home/jared/Development/apc/php_apc.c:373
#11 0x00000000006dd045 in module_destructor 
(module=0xdbe4c0) at /home/jared/Development/php-
trunk/Zend/zend_API.c:2241
#12 0x00000000006e223b in zend_hash_apply_deleter 
(ht=0xd3a740, p=0xdbe460)
    at /home/jared/Development/php-
trunk/Zend/zend_hash.c:632
#13 0x00000000006e3ba8 in zend_hash_graceful_reverse_destroy 
(ht=0xd3a740)
    at /home/jared/Development/php-
trunk/Zend/zend_hash.c:669
#14 0x00000000006d68c3 in zend_shutdown () at 
/home/jared/Development/php-trunk/Zend/zend.c:798
#15 0x000000000067b2aa in php_module_shutdown () at 
/home/jared/Development/php-trunk/main/main.c:2225
#16 0x000000000077bd49 in fpm_php_cleanup (which=<value 
optimised out>, arg=<value optimised out>)
    at /home/jared/Development/php-
trunk/sapi/fpm/fpm/fpm_php.c:184
#17 0x00000000007759b2 in fpm_cleanups_run (type=2) at 
/home/jared/Development/php-
trunk/sapi/fpm/fpm/fpm_cleanup.c:46
#18 0x0000000000780882 in fpm_unix_init_main () at 
/home/jared/Development/php-
trunk/sapi/fpm/fpm/fpm_unix.c:232
#19 0x0000000000774eae in fpm_init (argc=<value optimised 
out>, argv=<value optimised out>, config=
<value optimised out>, 
    prefix=<value optimised out>, test_conf=0) at 
/home/jared/Development/php-
trunk/sapi/fpm/fpm/fpm.c:51
#20 0x000000000077abd2 in main (argc=1, argv=0x7fffffffe678) 
at /home/jared/Development/php-
trunk/sapi/fpm/fpm/fpm_main.c:1817


Reproduce code:
---------------
sudo /etc/init.d/php-fpm start

Expected result:
----------------
Starting php-fpm  done



Actual result:
--------------
Starting php-fpm *** glibc detected *** /usr/local/sbin/php-
fpm: free(): invalid pointer: 0x00007ffff7e9c088 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x78a8f)[0x7ffff3e62a8f]
/lib/x86_64-linux-gnu/libc.so.6(cfree+0x73)[0x7ffff3e668e3]
/usr/local/sbin/php-fpm(destroy_zend_class+0x245)[0x6cd485]
/usr/local/sbin/php-fpm(zend_hash_clean+0x6b)[0x6e3acb]
/usr/local/lib/php/extensions/no-debug-non-zts-
20100525/apc.so(apc_interned_strings_shutdown+0x20)
[0x7ffff3204c50]
/usr/local/lib/php/extensions/no-debug-non-zts-
20100525/apc.so(apc_module_shutdown+0x12a)[0x7ffff31fe48a]
/usr/local/lib/php/extensions/no-debug-non-zts-
20100525/apc.so(+0xae0f)[0x7ffff31f3e0f]
/usr/local/sbin/php-fpm[0x6dd045]
/usr/local/sbin/php-fpm[0x6e223b]
/usr/local/sbin/php-
fpm(zend_hash_graceful_reverse_destroy+0x18)[0x6e3ba8]
/usr/local/sbin/php-fpm[0x6d68c3]
/usr/local/sbin/php-fpm(php_module_shutdown+0x2a)[0x67b2aa]
/usr/local/sbin/php-fpm[0x77bd49]
/usr/local/sbin/php-fpm[0x7759b2]
/usr/local/sbin/php-fpm[0x780882]
/usr/local/sbin/php-fpm[0x774eae]
/usr/local/sbin/php-fpm[0x77abd2]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xff)
[0x7ffff3e08eff]
/usr/local/sbin/php-fpm[0x42ab89]
======= Memory map: ========
00400000-00b0f000 r-xp 00000000 07:00 2263                               
/usr/local/sbin/php-fpm
00d0e000-00d0f000 r--p 0070e000 07:00 2263                               
/usr/local/sbin/php-fpm
00d0f000-00d1c000 rw-p 0070f000 07:00 2263                               
/usr/local/sbin/php-fpm
00d1c000-01243000 rw-p 00000000 00:00 0                                  
[heap]
7fffec000000-7fffec021000 rw-p 00000000 00:00 0 
7fffec021000-7ffff0000000 ---p 00000000 00:00 0 
7ffff31e9000-7ffff320b000 r-xp 00000000 07:00 525517                     
/usr/local/lib/php/extensions/no-debug-non-zts-
20100525/apc.so
7ffff320b000-7ffff340b000 ---p 00022000 07:00 525517                     
/usr/local/lib/php/extensions/no-debug-non-zts-
20100525/apc.so
7ffff340b000-7ffff340d000 r--p 00022000 07:00 525517                     
/usr/local/lib/php/extensions/no-debug-non-zts-
20100525/apc.so
7ffff340d000-7ffff340e000 rw-p 00024000 07:00 525517                     
/usr/local/lib/php/extensions/no-debug-non-zts-
20100525/apc.so
7ffff340e000-7ffff3417000 rw-p 00000000 00:00 0 
7ffff3417000-7ffff36bc000 r--p 00000000 07:00 174446                     
/usr/lib/locale/locale-archive
7ffff36bc000-7ffff36d4000 r-xp 00000000 07:00 219106                     
/lib/x86_64-linux-gnu/libpthread-2.13.so
7ffff36d4000-7ffff38d4000 ---p 00018000 07:00 219106                     
/lib/x86_64-linux-gnu/libpthread-2.13.so
7ffff38d4000-7ffff38d5000 r--p 00018000 07:00 219106                     
/lib/x86_64-linux-gnu/libpthread-2.13.so
7ffff38d5000-7ffff38d6000 rw-p 00019000 07:00 219106                     
/lib/x86_64-linux-gnu/libpthread-2.13.so
7ffff38d6000-7ffff38da000 rw-p 00000000 00:00 0 
7ffff38da000-7ffff38e3000 r-xp 00000000 07:00 3172                       
/lib/libbsd.so.0.2.0
7ffff38e3000-7ffff3ae2000 ---p 00009000 07:00 3172                       
/lib/libbsd.so.0.2.0
7ffff3ae2000-7ffff3ae3000 r--p 00008000 07:00 3172                       
/lib/libbsd.so.0.2.0
7ffff3ae3000-7ffff3ae4000 rw-p 00009000 07:00 3172                       
/lib/libbsd.so.0.2.0
7ffff3ae4000-7ffff3bcc000 r-xp 00000000 07:00 146124                     
/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.14
7ffff3bcc000-7ffff3dcb000 ---p 000e8000 07:00 146124                     
/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.14
7ffff3dcb000-7ffff3dd3000 r--p 000e7000 07:00 146124                     
/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.14
7ffff3dd3000-7ffff3dd5000 rw-p 000ef000 07:00 146124                     
/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.14
7ffff3dd5000-7ffff3dea000 rw-p 00000000 00:00 0 
7ffff3dea000-7ffff3f74000 r-xp 00000000 07:00 219092                     
/lib/x86_64-linux-gnu/libc-2.13.so
7ffff3f74000-7ffff4173000 ---p 0018a000 07:00 219092                     
/lib/x86_64-linux-gnu/libc-2.13.so
7ffff4173000-7ffff4177000 r--p 00189000 07:00 219092                     
/lib/x86_64-linux-gnu/libc-2.13.so
7ffff4177000-7ffff4178000 rw-p 0018d000 07:00 219092                     
/lib/x86_64-linux-gnu/libc-2.13.so
7ffff4178000-7ffff417e000 rw-p 00000000 00:00 0 
7ffff417e000-7ffff4193000 r-xp 00000000 07:00 146115                     
/lib/x86_64-linux-gnu/libgcc_s.so.1
7ffff4193000-7ffff4392000 ---p 00015000 07:00 146115                     
/lib/x86_64-linux-gnu/libgcc_s.so.1
7ffff4392000-7ffff4393000 r--p 00014000 07:00 146115                     
/lib/x86_64-linux-gnu/libgcc_s.so.1
7ffff4393000-7ffff4394000 rw-p 00015000 07:00 146115                     
/lib/x86_64-linux-gnu/libgcc_s.so.1
7ffff4394000-7ffff44de000 r-xp 00000000 07:00 26505                      
/usr/lib/libxml2.so.2.7.8
7ffff44de000-7ffff46dd000 ---p 0014a000 07:00 26505                      
/usr/lib/libxml2.so.2.7.8
7ffff46dd000-7ffff46e5000 r--p 00149000 07:00 26505                      
/usr/lib/libxml2.so.2.7.8
7ffff46e5000-7ffff46e7000 rw-p 00151000 07:00 26505                      
/usr/lib/libxml2.so.2.7.8
7ffff46e7000-7ffff46e8000 rw-p 00000000 00:00 0 
7ffff46e8000-7ffff46f3000 r-xp 00000000 07:00 5084                       
/usr/lib/libicuio.so.44.2
7ffff46f3000-7ffff48f3000 ---p 0000b000 07:00 5084                       
/usr/lib/libicuio.so.44.2
7ffff48f3000-7ffff48f4000 r--p 0000b000 07:00 5084                       
/usr/lib/libicuio.so.44.2
7ffff48f4000-7ffff48f5000 rw-p 0000c000 07:00 5084                       
/usr/lib/libicuio.so.44.2
7ffff48f5000-7ffff5735000 r--p 00000000 07:00 1166                       
/usr/lib/libicudata.so.44.2
7ffff5735000-7ffff5934000 ---p 00e40000 07:00 1166                       
/usr/lib/libicudata.so.44.2
7ffff5934000-7ffff5935000 rw-p 00e3f000 07:00 1166                       
/usr/lib/libicudata.so.44.2
7ffff5935000-7ffff5a69000 r-xp 00000000 07:00 6376                       
/usr/lib/libicuuc.so.44.2
7ffff5a69000-7ffff5c69000 ---p 00134000 07:00 6376                       
/usr/lib/libicuuc.so.44.2
7ffff5c69000-7ffff5c78000 r--p 00134000 07:00 6376                       
/usr/lib/libicuuc.so.44.2
7ffff5c78000-7ffff5c79000 rw-p 00143000 07:00 6376                       
/usr/lib/libicuuc.so.44.2
7ffff5c79000-7ffff5c7d000 rw-p 00000000 00:00 0 
7ffff5c7d000-7ffff5e2e000 r-xp 00000000 07:00 1362                       
/usr/lib/libicui18n.so.44.2
7ffff5e2e000-7ffff602e000 ---p 001b1000 07:00 1362                       
/usr/lib/libicui18n.so.44.2
Program received signal SIGABRT, Aborted.


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2011-08-10 09:49 UTC] Jared dot Williams at ntlworld dot com
Seems to have been fixed
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu May 02 03:01:29 2024 UTC