#48405 [NEW]: Segmentation fault while type casting array into object

From: dharmeshm at rediff dot co dot in Operating system: CentOS release 3.8 (Final) PHP version: 5.2.9 PHP Bug Type: Arrays related Bug description: Segmentation fault while type casting array into object Description: ------------ While converting array into object, it gives segmentation fault. php version 5.2.6 GDB backtrace result: (gdb) run /home/httpd/html/wordpress/test.php Starting program: /usr/local/bin/php /home/httpd/html/wordpress/test.php [Thread debugging using libthread_db enabled] [New Thread -1218523008 (LWP 30017)] Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1218523008 (LWP 30017)] _zend_mm_free_int (heap=0x8b656b0, p=0x8b656b0) at /usr/local/src/php-5.2.6/Zend/zend_alloc.c:1960 1960 if (ZEND_MM_IS_FREE_BLOCK(next_block)) { (gdb) bt #0 _zend_mm_free_int (heap=0x8b656b0, p=0x8b656b0) at /usr/local/src/php-5.2.6/Zend/zend_alloc.c:1960 #1 0x08290865 in _efree (ptr=0xbfff5930) at /usr/local/src/php-5.2.6/Zend/zend_alloc.c:2293 #2 0x0830b47a in zend_assign_to_variable (result=0xb75b7280, op1=0xb75b773c, op2=0xb75b72e0, value=0xbfff5930, type=2, Ts=0xbfff58e0, tsrm_ls=0x8b64280) at /usr/local/src/php-5.2.6/Zend/zend_execute.c:764 #3 0x082f703c in ZEND_ASSIGN_DIM_SPEC_CV_CONST_HANDLER (execute_data=0xbfff5970, tsrm_ls=0x8b64280) at /usr/local/src/php-5.2.6/Zend/zend_vm_execute.h:21437 #4 0x082c07c2 in execute (op_array=0xb75b6f20, tsrm_ls=0x8b64280) at /usr/local/src/php-5.2.6/Zend/zend_vm_execute.h:92 #5 0x082a7a4e in zend_execute_scripts (type=8, tsrm_ls=0x8b64280, retval=0x0, file_count=3) at /usr/local/src/php-5.2.6/Zend/zend.c:1134 #6 0x0826e4ed in php_execute_script (primary_file=0xbfff7d10, tsrm_ls=0x8b64280) at /usr/local/src/php-5.2.6/main/main.c:2005 #7 0x0830d0c2 in main (argc=2, argv=0xbfff7df4) at /usr/local/src/php-5.2.6/sapi/cli/php_cli.c:1140 (gdb) frame 2 #2 0x0830b47a in zend_assign_to_variable (result=0xb75b7280, op1=0xb75b773c, op2=0xb75b72e0, value=0xbfff5930, type=2, Ts=0xbfff58e0, tsrm_ls=0x8b64280) at /usr/local/src/php-5.2.6/Zend/zend_execute.c:764 764 zval_ptr_dtor(&value); Reproduce code: --------------- $wp_taxonomies['category'] = (object) array('name' => 'category', 'object_type' => 'post', 'hierarchical' => true, 'update_count_callback' => '_update_post_term_count'); Actual result: -------------- segmentation fault -- Edit bug report at http://bugs.php.net/?id=48405&edit=1 -- Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=48405&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=48405&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=48405&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=48405&r=fixedcvs Fixed in CVS and need be documented: http://bugs.php.net/fix.php?id=48405&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=48405&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=48405&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=48405&r=needscript Try newer version: http://bugs.php.net/fix.php?id=48405&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=48405&r=support Expected behavior: http://bugs.php.net/fix.php?id=48405&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=48405&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=48405&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=48405&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=48405&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=48405&r=dst IIS Stability: http://bugs.php.net/fix.php?id=48405&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=48405&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=48405&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=48405&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=48405&r=mysqlcfg