#48408 [NEW]: Exception thrown from two functions nested in expression causes segfault

From: nightstorm at tlen dot pl Operating system: Arch Linux 64-bit PHP version: 5.3CVS-2009-05-27 (snap) PHP Bug Type: Reproducible crash Bug description: Exception thrown from two functions nested in expression causes segfault Description: ------------ The code provided below causes segfault on today's PHP 5.3 snapshot. The same script works correctly on PHP 5.2.9. I noticed that if you comment or change the line with "#1#" comment, the segmentation fault does not occur. Reproduce code: --------------- <?php class B{ public function process($x){ return $x; } } class C{ public function generate($x){ throw new Exception; } } $b = new B; $c = new C; try{ $b->process($c->generate(0)); } catch(Exception $e){ $c->generate(0);// #1# } Expected result: ---------------- The script completes its work. Actual result: -------------- Segmentation fault: Program terminated with signal 11, Segmentation fault. [New process 17244] #0 ZEND_HANDLE_EXCEPTION_SPEC_HANDLER (execute_data=0x7f0dbdf18050) at /usr/src/php-5.3-dev/Zend/zend.h:392 392 return --pz->refcount__gc; (gdb) backtrace 5 #0 ZEND_HANDLE_EXCEPTION_SPEC_HANDLER (execute_data=0x7f0dbdf18050) at /usr/src/php-5.3-dev/Zend/zend.h:392 #1 0x0000000000741819 in execute (op_array=0x7f0dc11eacd0) at /usr/src/php-5.3-dev/Zend/zend_vm_execute.h:104 #2 0x0000000000717bf5 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /usr/src/php-5.3-dev/Zend/zend.c:1188 #3 0x00000000006c5099 in php_execute_script (primary_file=0x7fffc936f510) at /usr/src/php-5.3-dev/main/main.c:2182 #4 0x00000000007a000e in main (argc=2, argv=0x7fffc936f778) at /usr/src/php-5.3-dev/sapi/cli/php_cli.c:1188 -- Edit bug report at http://bugs.php.net/?id=48408&edit=1 -- Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=48408&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=48408&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=48408&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=48408&r=fixedcvs Fixed in CVS and need be documented: http://bugs.php.net/fix.php?id=48408&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=48408&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=48408&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=48408&r=needscript Try newer version: http://bugs.php.net/fix.php?id=48408&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=48408&r=support Expected behavior: http://bugs.php.net/fix.php?id=48408&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=48408&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=48408&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=48408&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=48408&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=48408&r=dst IIS Stability: http://bugs.php.net/fix.php?id=48408&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=48408&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=48408&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=48408&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=48408&r=mysqlcfg