php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #66105 Segfault using GD
Submitted: 2013-11-16 14:14 UTC Modified: 2016-07-31 04:22 UTC
From: potecheck at live dot jp Assigned: cmb (profile)
Status: No Feedback Package: GD related
PHP Version: 5.5.6 OS: Ubuntu 12.04.3 LTS
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2013-11-16 14:14 UTC] potecheck at live dot jp
Description:
------------
Sometimes I get a segmentation fault using GD.
This is Backtraces.

gdb /usr/local/apache2/bin/httpd /var/tmp/core
GNU gdb (Ubuntu/Linaro 7.4-2012.04-0ubuntu2.1) 7.4-2012.04
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://bugs.launchpad.net/gdb-linaro/>...
Reading symbols from /usr/local/apache2/bin/httpd...done.
[New LWP 15654]

warning: Can't read pathname for load map: Input/output error.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/local/apache2/bin/httpd -k start'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007fdadf6e351e in i_create_execute_data_from_op_array (nested=0 '\000', op_array=0x7fdae252b0c0)
    at /usr/local/src/make/php-5.5.6/Zend/zend_execute.c:1632
1632                    EX(prev_execute_data) = EG(current_execute_data);
(gdb) bt
#0  0x00007fdadf6e351e in i_create_execute_data_from_op_array (nested=0 '\000', op_array=0x7fdae252b0c0)
    at /usr/local/src/make/php-5.5.6/Zend/zend_execute.c:1632
#1  zend_execute (op_array=0x7fdae252b0c0) at /usr/local/src/make/php-5.5.6/Zend/zend_vm_execute.h:388
#2  zend_execute (op_array=0x7fdae252b0c0) at /usr/local/src/make/php-5.5.6/Zend/zend_vm_execute.h:383
#3  0x00007fdadf63b1b3 in zend_execute_scripts (type=2, retval=0x0, file_count=1)
    at /usr/local/src/make/php-5.5.6/Zend/zend.c:1320
#4  0x00007fdadf6e6d5e in php_handler (r=0x228db50) at /usr/local/src/make/php-5.5.6/sapi/apache2handler/sapi_apache2.c:669
#5  0x0000000000448f58 in ap_run_handler (r=0x228db50) at config.c:169
#6  0x00000000004493ae in ap_invoke_handler (r=0x228db50) at config.c:432
#7  0x0000000000460df2 in ap_process_async_request (r=0x228db50) at http_request.c:317
#8  0x0000000000460f4f in ap_process_request (r=0x228db50) at http_request.c:363
#9  0x000000000045d6c5 in ap_process_http_sync_connection (c=0x22745e0) at http_core.c:190
#10 ap_process_http_connection (c=0x22745e0) at http_core.c:231
#11 0x0000000000452088 in ap_run_process_connection (c=0x22745e0) at connection.c:41
#12 0x000000000046f8c8 in child_main (child_num_arg=<optimized out>) at prefork.c:704
#13 0x000000000046fad7 in make_child (s=0x1fff1d0, slot=5) at prefork.c:800
#14 0x0000000000470892 in perform_idle_server_maintenance (p=<optimized out>) at prefork.c:902
#15 prefork_run (_pconf=<optimized out>, plog=<optimized out>, s=<optimized out>) at prefork.c:1090
#16 0x000000000042f346 in ap_run_mpm (pconf=0x1fd4138, plog=0x20035b8, s=0x1fff1d0) at mpm_common.c:98
#17 0x0000000000428c13 in main (argc=3, argv=0x7fffb29e8188) at main.c:777


Test script:
---------------
<?

// $url is image URL
$f = fopen( $url, 'rb', false );
$im = imagecreatefromstring(stream_get_contents($f));

header( 'Cache-Control: public, max-age=604800' );
header( 'Content-Type: image/jpeg' );
imagejpeg($im);

imagedestroy($im);



Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2016-07-23 14:26 UTC] cmb@php.net
-Status: Open +Status: Feedback -Assigned To: +Assigned To: cmb
 [2016-07-23 14:26 UTC] cmb@php.net
Does this issue still persist on currently supported PHP versions?
 [2016-07-31 04:22 UTC] php-bugs at lists dot php dot net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sun May 05 17:01:31 2024 UTC