#48034 [Com]: Crash when script is 8192 (8KB) bytes long

From: Date: Fri, 22 May 2009 10:13:35 +0000
Subject: #48034 [Com]: Crash when script is 8192 (8KB) bytes long
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-137635@lists.php.net to get a copy of this message 
 ID:               48034
 Comment by:       jille at hexon dot cx
 Reported By:      ninzya at inbox dot lv
 Status:           Assigned
 Bug Type:         Reproducible crash
 Operating System: *
 PHP Version:      5.*, 6CVS (2009-04-21)
 Assigned To:      dmitry
 New Comment:

We also got this crash; with a 4096 bytes long php file.
It even crashed with 'php -l file' running on Linux 2.6.29.2-smp.

I can try to get a coredump if useful.


Previous Comments:
------------------------------------------------------------------------

[2009-05-04 16:06:37] pajoye@php.net

Not fixed. Only a temp hack.

------------------------------------------------------------------------

[2009-04-28 07:16:19] dmitry@php.net

This bug has been fixed in CVS.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.



------------------------------------------------------------------------

[2009-04-22 11:09:23] bjori@php.net

See also bug#48043

------------------------------------------------------------------------

[2009-04-21 17:20:21] ninzya at inbox dot lv

I did everything mentioned in
http://bugs.php.net/bugs-generating-backtrace-win32.php

and got these results:

Thread 250 - System ID 5552
Entry point   msvcrt!_endthreadex+3a 
Create time   21.04.2009 15:20:51 
Time spent in user mode   0 Days 0:0:0.656 
Time spent in kernel mode   0 Days 0:0:0.921 


Function     Arg 1     Arg 2     Arg 3   Source 
php5ts!lex_scan+447c     0550fa34     010f54a0     0000002f    
php5ts!zend_register_auto_global+11f     00000000     00000000    
00000000

------------------------------------------------------------------------

[2009-04-21 15:31:46] lbarnaud@php.net

It seems related to http://bugs.php.net/bug.php?id=47596 . Not exactly
the same problem, though.
It seems php_stream_open_for_zend() does not mmap() enough for
ZEND_MMAP_AHEAD (PHP_STREAM_OPTION_MMAP_API in plain_wrapper adjusts the
mmap length to the filesize, so ignoring ZEND_MMAP_AHEAD), and this may
crash when the parser reads ahead of the mmap()ed region. 

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/48034

-- 
Edit this bug report at http://bugs.php.net/?id=48034&edit=1

Thread (29 messages)

« previous php.bugs (#137635) next »