#46736 [NEW]: crash when using FastCGI, but not with CGI

From: louis at steelbytes dot com Operating system: Vista SP1 x64 PHP version: 5.2.7RC5 PHP Bug Type: CGI related Bug description: crash when using FastCGI, but not with CGI Description: ------------ I have a large app that runs fine with all tested versions of PHP if I use CGI/IIS, but if I switch to FastCGI it crashes. Reproduce code: --------------- sorry, not yet available - it is part of a bit private projetc, I am trying to make a small code snippet to demo this crash. Expected result: ---------------- . Actual result: -------------- > php5ts.dll!zend_do_pass_param(_znode * param=0x00c0c69c, unsigned char op='B', int offset=0x00000001, void * * * tsrm_ls=0x003f2718) Line 1609 + 0x11 bytes C php5ts.dll!zendparse(void * tsrm_ls=0x01c09f5a) Line 749 C php5ts.dll!zend_stream_stdio_reader(void * handle=0x003f2718, char * buf=0x003f2718, unsigned int len=0x012c1e48, void * * * tsrm_ls=0x00000004) Line 28 + 0x17 bytes C php5ts.dll!zend_flush_buffer(yy_buffer_state * b=0x00c0ff88, void * * * tsrm_ls=0x00406259) Line 6413 + 0x6 bytes C php-cgi.exe!main(int argc=0x7efde000, char * * argv=0x00c0ffd4) Line 1318 C kernel32.dll!@BaseThreadInitThunk@12() + 0xe bytes ntdll.dll!___RtlUserThreadStart@8() + 0x23 bytes ntdll.dll!__RtlUserThreadStart@8() + 0x1b bytes if (ARG_MAY_BE_SENT_BY_REF(function_ptr, (zend_uint) offset)) { 10014305 mov eax,dword ptr [esi+1Ch] 10014308 test eax,eax 1001430A je zend_do_pass_param+0DCh (1001431Ch) 1001430C cmp edi,dword ptr [esi+14h] 1001430F ja zend_do_pass_param+0DCh (1001431Ch) 10014311 lea edx,[edi+edi*2] 10014314 xor ecx,ecx 10014316 mov cl,byte ptr [eax+edx*8-6] 1001431A jmp zend_do_pass_param+0E1h (10014321h) 1001431C xor ecx,ecx 1001431E mov cl,byte ptr [esi+20h] 10014321 cmp ecx,2 10014324 jne zend_do_pass_param+101h (10014341h) EAX = 71F4F120 EBX = 00C0C69C ECX = 00000000 EDX = 00000003 ESI = 01BE23E8 EDI = 00000001 EIP = 10014316 ESP = 00C0C4B4 EBP = 00000042 EFL = 00010246 71F4F132 = ?? -- Edit bug report at http://bugs.php.net/?id=46736&edit=1 -- Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=46736&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=46736&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=46736&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=46736&r=fixedcvs Fixed in CVS and need be documented: http://bugs.php.net/fix.php?id=46736&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=46736&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=46736&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=46736&r=needscript Try newer version: http://bugs.php.net/fix.php?id=46736&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=46736&r=support Expected behavior: http://bugs.php.net/fix.php?id=46736&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=46736&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=46736&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=46736&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=46736&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=46736&r=dst IIS Stability: http://bugs.php.net/fix.php?id=46736&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=46736&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=46736&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=46736&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=46736&r=mysqlcfg