Bug #17931: Segfault when passing array as second arg to xslt_set_error_handler

From: marcel@beerta.de Operating system: Linux PHP version: 4.2.1 PHP Bug Type: Reproducible crash Bug description: Segfault when passing array as second arg to xslt_set_error_handler I get a segfault if i want to pass an array with $object,'method' as second arg to xslt_set_error_handler. the line looks like this: xslt_set_error_handler($this->_parser, array($this,'xslt_trap_error') ); Backtrace: #0 0x401f594a in __morecore () from /lib/libc.so.6 #1 0x401f5950 in __morecore () from /lib/libc.so.6 #2 0x40452b22 in Situation::message () from /usr/lib/libsablot.so.0 #3 0x404487da in Processor::report () from /usr/lib/libsablot.so.0 #4 0x4044749c in Processor::setHandler () from /usr/lib/libsablot.so.0 #5 0x4044cb6c in SablotUnregHandler () from /usr/lib/libsablot.so.0 #6 0x403870b0 in free_processor (rsrc=Cannot access memory at address 0x21 ) at sablot.c:617 Cannot access memory at address 0x1 -- Edit bug report at http://bugs.php.net/?id=17931&edit=1 -- Fixed in CVS: http://bugs.php.net/fix.php?id=17931&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=17931&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=17931&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=17931&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=17931&r=support Expected behavior: http://bugs.php.net/fix.php?id=17931&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=17931&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=17931&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=17931&r=globals