#43179 [NEW]: Segfault on combo of recursive array, class members and variable variables

From: php at lorddeath dot net Operating system: Windows / Linux PHP version: 5.2.4 PHP Bug Type: Reproducible crash Bug description: Segfault on combo of recursive array, class members and variable variables Description: ------------ When the code I've supplied is executed, PHP crashes, leaving a segfault message in Apache's log. The code looks a little perverse, though a variation on it had a real use in my situation, but regardless, PHP shouldn't segfault, no matter how perverse the code is :) Reproduce code: --------------- class MC { public $Vars = array(); public function Execute() { if (!defined('DONE')) { define('DONE', true); foreach ($this->Vars as $k => $v) { $$k = $v; } $MyArr['Var'] = $MyArr; $MC = new MC(); $MC->Vars = $MyArr; $MC->Execute(); } } } $MyArr = array(); $MyArr['Var'] = $MyArr; $MC = new MC(); $MC->Vars = $MyArr; $MC->Execute(); echo "Hello world."; Expected result: ---------------- "Hello world." should be printed. Actual result: -------------- Nothing is printed, and a segfault line is added to /var/log/apache2/error.log: [Fri Nov 02 15:50:11 2007] [notice] child pid 23282 exit signal Segmentation fault (11) -- Edit bug report at http://bugs.php.net/?id=43179&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=43179&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=43179&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=43179&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=43179&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=43179&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=43179&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=43179&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=43179&r=needscript Try newer version: http://bugs.php.net/fix.php?id=43179&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=43179&r=support Expected behavior: http://bugs.php.net/fix.php?id=43179&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=43179&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=43179&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=43179&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=43179&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=43179&r=dst IIS Stability: http://bugs.php.net/fix.php?id=43179&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=43179&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=43179&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=43179&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=43179&r=mysqlcfg