#46945 [Opn->Bgs]: overwriting containing variable via extract segfaults in _zend_is_inconsistent

ID: 46945 Updated by: scottmac@php.net Reported By: sjon at hortensius dot net -Status: Open +Status: Bogus Bug Type: Reproducible crash Operating System: Linux PHP Version: 5.2.8 New Comment: Duplicate of bug #46873 Previous Comments: ------------------------------------------------------------------------ [2008-12-26 15:46:58] sjon at hortensius dot net Description: ------------ The supplied code shouldn't crash Reproduce code: --------------- $x = array('x' => 9); extract($x); Actual result: -------------- #0 0x08279691 in _zend_is_inconsistent (ht=0x9, file=0x850ada4 "/tmp/php/src/php-5.2.8/Zend/zend_hash.c", line=1277) at /tmp/php/src/php-5.2.8/Zend/zend_hash.c:54 #1 0x0827c8c0 in zend_hash_move_forward_ex (ht=0x9, pos=0xbfabdc68) at /tmp/php/src/php-5.2.8/Zend/zend_hash.c:1277 #2 0x0817d0e9 in zif_extract (ht=1, return_value=0x95da738, return_value_ptr=0x0, this_ptr=0x0, return_value_used=0) at /tmp/php/src/php-5.2.8/ext/standard/array.c:1491 #3 0x08294a64 in zend_do_fcall_common_helper_SPEC (execute_data=0xbfabde78) at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:200 #4 0x0829a367 in ZEND_DO_FCALL_SPEC_CONST_HANDLER (execute_data=0xbfabde78) at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:1729 #5 0x082945e4 in execute (op_array=0x95da104) at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:92 #6 0x0826f70c in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /tmp/php/src/php-5.2.8/Zend/zend.c:1215 #7 0x0821c793 in php_execute_script (primary_file=0xbfac0204) at /tmp/php/src/php-5.2.8/main/main.c:2044 #8 0x082ee8b6 in main (argc=2, argv=0xbfac0364) at /tmp/php/src/php-5.2.8/sapi/cli/php_cli.c:1139 ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=46945&edit=1