#39749 [Opn->Fbk]: function call returns crash under certain conditions

ID: 39749 Updated by: tony2001@php.net Reported By: steve-php-dev at spamwiz dot com -Status: Open +Status: Feedback Bug Type: Reproducible crash Operating System: CentOS 3 PHP Version: 5.2.0 New Comment: Ok, great. Previous Comments: ------------------------------------------------------------------------ [2006-12-05 23:04:16] steve-php-dev at spamwiz dot com I'm downloading the CVS version now. I neglected to --enable-debug when generating the backtrace. When it was enabled, the problem didn't occur, however. I will update again after trying the latest CVS. ------------------------------------------------------------------------ [2006-12-05 22:57:06] tony2001@php.net Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://snaps.php.net/win32/php5.2-win32-latest.zip ------------------------------------------------------------------------ [2006-12-05 22:51:06] steve-php-dev at spamwiz dot com (gdb) run -X Starting program: /usr/local/apache/bin/httpd -X (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) [Thread debugging using libthread_db enabled] [New Thread -1218542944 (LWP 8821)] Processing config directory: /usr/local/apache/conf/vhosts/*.conf Processing config file: /usr/local/apache/conf/vhosts/dev-apache.conf Processing config file: /usr/local/apache/conf/vhosts/empty.conf Processing config directory: /etc/httpd/conf.d/*.conf Processing config file: /etc/httpd/conf.d/apt-proxy.conf Processing config file: /etc/httpd/conf.d/monitor.conf Processing config file: /etc/httpd/conf.d/nagios.conf [Tue Dec 5 15:49:35 2006] [warn] NameVirtualHost *:80 has no VirtualHosts Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1218542944 (LWP 8821)] 0x080e294e in _zval_ptr_dtor () (gdb) bt #0 0x080e294e in _zval_ptr_dtor () #1 0x08109698 in zend_get_zval_ptr_ptr () #2 0x08108b28 in execute () #3 0x080eecae in zend_execute_scripts () #4 0x080b6161 in php_execute_script () #5 0x0814fa6a in apache_php_module_main () #6 0x080ac6b8 in ap_get_server_built () #7 0x080abc71 in ap_get_server_built () #8 0x083f0043 in ap_invoke_handler () #9 0x08409857 in ap_update_mtime () #10 0x08408941 in ap_process_request () #11 0x0840179e in suck_in_ap_validate_password () #12 0x083fff68 in suck_in_ap_validate_password () #13 0x083fef95 in suck_in_ap_validate_password () #14 0x083fcb26 in main () (gdb) ------------------------------------------------------------------------ [2006-12-05 22:41:22] steve-php-dev at spamwiz dot com The following produces a segfault: <? function function_call($arg1, $arg2, $arg3) {} $arr1 = array(1, 2, 3); $arr2 = array(4, 5, 6); $arr3 = array(7, 8, 9); $arr = function_call($arr1, $arr2, $arr3); echo "done"; ?> If you echo something and exit inside the function, it does not segfault. ------------------------------------------------------------------------ [2006-12-05 22:00:56] tony2001@php.net Thank you for this bug report. To properly diagnose the problem, we need a backtrace to see what is happening behind the scenes. To find out how to generate a backtrace, please read http://bugs.php.net/bugs-generating-backtrace.php for *NIX and http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32 Once you have generated a backtrace, please submit it to this bug report and change the status back to "Open". Thank you for helping us make PHP better. What is the difference between these two servers? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/39749 -- Edit this bug report at http://bugs.php.net/?id=39749&edit=1