#38408 [NEW]: shutdown_memory_manager crash

From: gacek at intertele dot pl Operating system: Linux FC4 x86_64 PHP version: 4.4.3 PHP Bug Type: Reproducible crash Bug description: shutdown_memory_manager crash Description: ------------ Test tests/lang/bug35239.php causes segfault in php-4.4.3 4.4.2 version is also affected 5.1.4 is unaffected Reproduce code: --------------- <?php $a = new stdClass; $a->x0 = new stdClass; $a->x0->y0 = 'a'; $a->x0->y1 =& $a->x0; $a->x0->y2 =& $a->x0; $a->x0->y0 = 'b'; var_dump($a); $a->x0->y1 = "ok\n"; echo $a->x0; ?> Expected result: ---------------- No segfault Actual result: -------------- (gdb) where #0 0x00002aaaac8b2250 in raise () from /lib64/libc.so.6 #1 0x00002aaaac8b3720 in abort () from /lib64/libc.so.6 #2 0x00002aaaac8e804f in __libc_message () from /lib64/libc.so.6 #3 0x00002aaaac8ede4f in _int_free () from /lib64/libc.so.6 #4 0x00002aaaac8ee38e in free () from /lib64/libc.so.6 #5 0x000000000053b55a in shutdown_memory_manager (silent=0, clean_cache=0) at /usr/src/redhat/BUILD/php-4.4.3/Zend/zend_alloc.c:492 #6 0x0000000000512b62 in php_request_shutdown (dummy=0x0) at /usr/src/redhat/BUILD/php-4.4.3/main/main.c:1010 #7 0x000000000056bf03 in main (argc=46, argv=0x7fff203128f8) at /usr/src/redhat/BUILD/php-4.4.3/sapi/cli/php_cli.c:883 -- Edit bug report at http://bugs.php.net/?id=38408&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=38408&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=38408&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=38408&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=38408&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=38408&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=38408&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=38408&r=needscript Try newer version: http://bugs.php.net/fix.php?id=38408&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=38408&r=support Expected behavior: http://bugs.php.net/fix.php?id=38408&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=38408&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=38408&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=38408&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38408&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=38408&r=dst IIS Stability: http://bugs.php.net/fix.php?id=38408&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=38408&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=38408&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=38408&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=38408&r=mysqlcfg