php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #76993 SIGBUS crash in lex_scan
Submitted: 2018-10-10 13:32 UTC Modified: 2018-11-18 22:39 UTC
From: webmaster at mail dot de Assigned:
Status: Open Package: Scripting Engine problem
PHP Version: 7.1.22 OS: Debian Stretch
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2018-10-10 13:32 UTC] webmaster at mail dot de
Description:
------------
Hi,

i am experiencing a SIGBUS error with PHP for a sugarCRM installation when doing some basic click in the environment. I tried this on Debian Jessie with the sury.org packages, the Debian Stretch Docker container and the Alpine container, all with 7.1.22.
I can reproduce it for all 3 environments. For the Debian Stretch container i created the gdb backtrace.

This might be related to https://bugs.php.net/bug.php?id=52752 
But that is so old, so i am not really sure. 

Regards,
Sebastian


php -m
[PHP Modules]
bcmath
calendar
Core
ctype
curl
date
dom
exif
fileinfo
filter
ftp
gd
gettext
hash
iconv
imap
intl
json
libxml
mbstring
mcrypt
mysqli
mysqlnd
openssl
pcntl
pcre
PDO
pdo_mysql
pdo_sqlite
Phar
posix
readline
Reflection
session
SimpleXML
SPL
sqlite3
standard
tokenizer
xml
xmlreader
xmlwriter
xsl
zip
zlib

[Zend Modules]

php -v
PHP 7.1.22 (cli) (built: Oct 10 2018 12:42:01) ( NTS DEBUG )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.1.0, Copyright (c) 1998-2018 Zend Technologies




Actual result:
--------------
#0  0x000056025de817e0 in lex_scan (zendlval=0x7fff9e39c600) at Zend/zend_language_scanner.c:2173
2173			yych = *YYCURSOR;
(gdb) bt
#0  0x000056025de817e0 in lex_scan (zendlval=0x7fff9e39c600) at Zend/zend_language_scanner.c:2173
#1  0x000056025dea87c8 in zendlex (elem=0x7fff9e39c660) at /usr/src/php/Zend/zend_compile.c:1703
#2  0x000056025de75ea5 in zendparse () at /usr/src/php/Zend/zend_language_parser.c:4217
#3  0x000056025de7cdb1 in zend_compile (type=2) at Zend/zend_language_scanner.l:585
#4  0x000056025de7d01f in compile_file (file_handle=0x7fff9e39d340, type=8) at Zend/zend_language_scanner.l:635
#5  0x000056025dc88876 in phar_compile_file (file_handle=0x7fff9e39d340, type=8) at /usr/src/php/ext/phar/phar.c:3320
#6  0x000056025de7d152 in compile_filename (type=8, filename=0x7f52bbe150e0) at Zend/zend_language_scanner.l:662
#7  0x000056025df3e9d8 in zend_include_or_eval (inc_filename=0x7f52bbe150e0, type=8) at /usr/src/php/Zend/zend_execute.c:2845
#8  0x000056025df8b734 in ZEND_INCLUDE_OR_EVAL_SPEC_CV_HANDLER () at /usr/src/php/Zend/zend_vm_execute.h:35499
#9  0x000056025df3ec49 in execute_ex (ex=0x7f52bbe14030) at /usr/src/php/Zend/zend_vm_execute.h:429
#10 0x000056025df3ed5a in zend_execute (op_array=0x7f52bbe76000, return_value=0x0) at /usr/src/php/Zend/zend_vm_execute.h:474
#11 0x000056025dedb8e3 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /usr/src/php/Zend/zend.c:1482
#12 0x000056025de40e9c in php_execute_script (primary_file=0x7fff9e39fa80) at /usr/src/php/main/main.c:2577
#13 0x000056025dfd5e04 in main (argc=1, argv=0x7fff9e39ff18) at /usr/src/php/sapi/fpm/fpm/fpm_main.c:1966

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2018-10-10 13:35 UTC] nikic@php.net
-Status: Open +Status: Feedback
 [2018-10-10 13:35 UTC] nikic@php.net
Is this an issue you see consistently (i.e. SIGBUS every time you access a certain file), or sporadically?

May another file be concurrently modifying the file? If so, that would be bug #52752.
 [2018-10-10 15:03 UTC] webmaster at mailz dot de
Hi,

i am not sure what SugarCRM is doing internally, so i cannot really say. But this is indeed possible for the cache files that are used. 

Regards,
Sebastian
 [2018-11-18 22:39 UTC] cmb@php.net
-Status: Feedback +Status: Open
 
PHP Copyright © 2001-2018 The PHP Group
All rights reserved.
Last updated: Tue Dec 11 23:01:25 2018 UTC