From: steve at grommit dot com
Operating system: OpenSolaris (snv_75a)
PHP version: 5.2.5
PHP Bug Type: Apache2 related
Bug description: Core dump in _zend_mm_alloc_int
Description:
------------
I'm seeing consistent core dumps of httpd in libphp5.so (compiled on my
Solaris Nevada build 75a machine), all of them here:
libphp5.so`_zend_mm_alloc_int+0x5e(82329e8, 2d)
This is snv_75a on a quad core Intel xeon with PHP 5.2.5 and Apache2
2.2.3.
Actual result:
--------------
Stack trace:
[root@grommit:core] 501$ mdb core.httpd.22142
$Loading modules: [ libc.so.1 libnvpair.so.1 libuutil.so.1 libavl.so.1
ld.so.1 ]
> $c
libphp5.so`_zend_mm_alloc_int+0x5e(82329e8, 2d)
libphp5.so`_emalloc+0x27(2d)
libphp5.so`_zend_hash_quick_add_or_update+0x1f1(85cec90, 8999260, a,
7f4f5fed,
80438a8, 4)
libphp5.so`_get_zval_ptr_ptr+0x17e(880a6c0, 8043940, 80438f0, 1)
libphp5.so`ZEND_RECV_INIT_SPEC_CONST_HANDLER+0x103(8044168)
libphp5.so`execute+0x12d(8714c90)
libphp5.so`zend_do_fcall_common_helper_SPEC+0x29f(8044fd8)
libphp5.so`ZEND_DO_FCALL_SPEC_CONST_HANDLER+0x67(8044fd8)
libphp5.so`execute+0x12d(8906200)
libphp5.so`zend_do_fcall_common_helper_SPEC+0x29f(8047558)
libphp5.so`ZEND_DO_FCALL_BY_NAME_SPEC_HANDLER+0x15(8047558)
libphp5.so`execute+0x12d(823daf8)
libphp5.so`zend_execute_scripts+0x128(8, 0, 3, 0, 8047b24, 0)
libphp5.so`php_execute_script+0x26d(8047b24)
libphp5.so`php_handler+0x426(8380000)
ap_run_handler+0x25(8380000)
ap_invoke_handler+0xba(8380000)
ap_process_request+0x50(8380000)
ap_process_http_connection+0x52(8372260)
ap_run_process_connection+0x25(8372260)
ap_process_connection+0x3a(8372260, 8371fc8)
child_main+0x2f6(13)
make_child+0x84(80beaf8, 13)
perform_idle_server_maintenance+0xe2(80bcc58)
ap_mpm_run+0x234(80bcc58, 80ead10, 80beaf8)
main+0x6e8(3, 8047e38, 8047e48)
_start+0x7a(3, 8047ed4, 8047eeb, 8047eee, 0, 8047ef4)
Dissassembly of that portion of the code:
> libphp5.so`_zend_mm_alloc_int+0x5e::dis
libphp5.so`_zend_mm_alloc_int+0x3f: shrl $0x3,%esi
libphp5.so`_zend_mm_alloc_int+0x42: leal -0x2(%esi),%ecx
libphp5.so`_zend_mm_alloc_int+0x45: cmpl %edx,%eax
libphp5.so`_zend_mm_alloc_int+0x47:
jb +0x44e <libphp5.so`_zend_mm_alloc_int+0x49b>
libphp5.so`_zend_mm_alloc_int+0x4d: movl 0x8(%ebp),%eax
libphp5.so`_zend_mm_alloc_int+0x50: movl %eax,-0x4(%ebp)
libphp5.so`_zend_mm_alloc_int+0x53: movl 0x3c(%eax,%esi,4),%edx
libphp5.so`_zend_mm_alloc_int+0x57: testl %edx,%edx
libphp5.so`_zend_mm_alloc_int+0x59:
je +0x18 <libphp5.so`_zend_mm_alloc_int+0x73>
libphp5.so`_zend_mm_alloc_int+0x5b: leal 0x8(%edx),%eax
libphp5.so`_zend_mm_alloc_int+0x5e: movl 0x8(%edx),%ecx
libphp5.so`_zend_mm_alloc_int+0x61: movl -0x4(%ebp),%edx
libphp5.so`_zend_mm_alloc_int+0x64: movl %ecx,0x3c(%edx,%esi,4)
libphp5.so`_zend_mm_alloc_int+0x68: movl -0x10(%ebp),%ecx
libphp5.so`_zend_mm_alloc_int+0x6b: subl %ecx,0x40(%edx)
libphp5.so`_zend_mm_alloc_int+0x6e:
jmp +0x443 <libphp5.so`_zend_mm_alloc_int+0x4b6>
libphp5.so`_zend_mm_alloc_int+0x73: movl -0x4(%ebp),%eax
libphp5.so`_zend_mm_alloc_int+0x76: movl 0x4(%eax),%eax
libphp5.so`_zend_mm_alloc_int+0x79: shrl %cl,%eax
libphp5.so`_zend_mm_alloc_int+0x7b: testl %eax,%eax
libphp5.so`_zend_mm_alloc_int+0x7d:
je +0x1b <libphp5.so`_zend_mm_alloc_int+0x9a>
Register contents:
> $r
%cs = 0x0043 %eax = 0x41373041
%ds = 0x004b %ebx = 0xfd3d156c
%ss = 0x004b %ecx = 0x00000005
%es = 0x004b %edx = 0x41373039
%fs = 0x0000 %esi = 0x00000007
%gs = 0x01c3 %edi = 0x00000000
%eip = 0xfd28f552 libphp5.so`_zend_mm_alloc_int+0x5e
%ebp = 0x080437ec
%kesp = 0x00000000
%eflags = 0x00000206
id=0 vip=0 vif=0 ac=0 vm=0 rf=0 nt=0 iopl=0x0
status=<of,df,IF,tf,sf,zf,af,PF,cf>
%esp = 0x080437c4
%trapno = 0xe
%err = 0x4
>
--
Edit bug report at http://bugs.php.net/?id=43582&edit=1
--
Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=43582&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=43582&r=trysnapshot52
Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=43582&r=trysnapshot53
Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=43582&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=43582&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=43582&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=43582&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=43582&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=43582&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=43582&r=support
Expected behavior: http://bugs.php.net/fix.php?id=43582&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=43582&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=43582&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=43582&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=43582&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=43582&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=43582&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=43582&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=43582&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=43582&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=43582&r=mysqlcfg