php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #71195 libxml2 deadlocks on Windows ZTS release
Submitted: 2015-12-22 11:10 UTC Modified: 2016-02-16 16:22 UTC
From: maroszek at gmx dot net Assigned: ab (profile)
Status: Closed Package: XML related
PHP Version: 7.0.1 OS: Windows
Private report: No CVE-ID: None
 [2015-12-22 11:10 UTC] maroszek at gmx dot net
Description:
------------
libxml2 2.9.2 has a bug, which causes deadlocks in the ZTS version.

libxml2 2.9.3 was released, which has a proper fix.
See: http://www.xmlsoft.org/news.html
See: https://bugzilla.gnome.org/show_bug.cgi?id=737851
See: https://git.gnome.org/browse/libxml2/commit/?id=620a70615e68b30db1a80a993180a41dc24f12b9

Stacktrace of my affected PHP installation:
https://www.dropbox.com/s/4xzfz3mncqzw8bk/xmllock.png?dl=0

Any chance to get new versions of PHP 5.5/5.6/7.0 with the new libxml2 version?

I know PHP 5.5 is only in "security fixes only". Is this critical enough to qualify aswell?

Test script:
---------------
not required

Expected result:
----------------
No deadlocks

Actual result:
--------------
Deadlock

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2015-12-22 12:43 UTC] ab@php.net
-Assigned To: +Assigned To: ab
 [2016-01-04 19:54 UTC] maroszek at gmx dot net
Hi, 

i kindly want to ask, if there is a chance to get a snapshot/QA release on this one?

Thanks in advance!
 [2016-01-04 20:43 UTC] ab@php.net
Thanks for keeping an eye on this. I was working on dependency upgrades past two weeks, see some prepared http://windows.php.net/downloads/php-sdk/deps/ for both 5 and 7 branches. But otherwise the work on their integration and as well on the other TS issue was stalled a bit due to holidays. Expect more activity on the new deps integration next week, so you can grab them from http://windows.php.net/downloads/snaps/ .

Thanks.
 [2016-01-11 11:48 UTC] maroszek at gmx dot net
Hi,

i am keeping an eye on the snapshots and it seems everything works great except the ZTS builds i'd like to test :)

For 5.6 the x86 ZTS build seem to fail.
For 5.5 all ZTS builds seem to fail.

Thanks for effort!
 [2016-01-11 17:47 UTC] ab@php.net
Some builds fail to upload currently, that's being investigated. But normally it's already fetchable, like http://windows.php.net/downloads/snaps/php-5.6/r07133ae/ , or for PHP-7.0 as well. With 5.5 is another story, as the branch is in the security only mode, normal commit access is blocked so it'll not trigger snapshots frequently. The deps themselves was put for the builds like 2-3 days ago already.

For 5.5, if you need the current snaps and cannot build yourself - please let me know. I can produce and make them available for you.

Thanks.
 [2016-01-18 07:31 UTC] maroszek at gmx dot net
I was able to switch to PHP 5.6 and it looks very good! Thanks!
 [2016-02-16 16:22 UTC] ab@php.net
-Status: Assigned +Status: Closed
 [2016-02-16 16:22 UTC] ab@php.net
libxml 2.9.3 is now used with all the latest PHP releases.

Thanks.
 
PHP Copyright © 2001-2022 The PHP Group
All rights reserved.
Last updated: Mon Jan 17 11:03:33 2022 UTC