Bug #18301: crash in ./zend_execute.c:1598

From: pailloncy@ifrance.com Operating system: Solaris 2.5.1 PHP version: 4.2.1 PHP Bug Type: Reproducible crash Bug description: crash in ./zend_execute.c:1598 One of my script crashs all the time whatever the config I use. I set up php to log, display any error (except warning) : nothing is log. I update to the most recent software (apache, php, mysql) : always crash. I try to disable most of the apache module : always crash. So I download gdb (GNU gdb 5.2) and I run apache in non-fork mode, and here is the report: OS Version : # uname -a SunOS gdr-isis 5.5.1 Generic_103640-35 sun4m sparc SUNW,SPARCstation-20 version : apache_1.3.26 php-4.2.1 mysql-3.23.51 php info : PHP Version 4.2.1 System SunOS gdr-isis 5.5.1 Generic_103640-35 sun4m sparc SUNW,SPARCstation-20 Build Date Jul 10 2002 14:02:44 Configure Command './configure' '--prefix=/tdsi2/php4' '--enable-calendar' '--enable-inline-optimization' '--with-apxs=/tdsi2/apache/bin/apxs' '--enable-trans-sid' '--enable-track-vars' '--with-pgsql=/tdsi2/pgsql' '--with-zlib' '--with-mysql=/tdsi2/mysql' '--enable-memory-limit' '--enable-mbstring' '--enable-wddx' '--enable-debug' '--with-mnogosearch=/tdsi2/mnogosearch' Server API Apache Virtual Directory Support disabled Configuration File (php.ini) Path /tdsi2/php4/lib/php.ini Debug Build yes Thread Safety disabled This program makes use of the Zend Scripting Language Engine: Zend Engine v1.2.0, Copyright (c) 1998-2002 Zend Technologies apache/logs/error_log : [Fri Jul 12 11:01:36 2002] [notice] Apache/1.3.26 (Unix) mod_gzip/1.3.19.1a AuthMySQL/2.20 mod_perl/1.26 configured -- resuming normal operations [Fri Jul 12 11:01:36 2002] [notice] Accept mutex: fcntl (Default: fcntl) [Fri Jul 12 11:01:43 2002] [notice] child pid 3419 exit signal Segmentation Fault (11) gdb output : (gdb) run -X -F -f/tdsi2/apache/conf/httpd.conf Starting program: /tdsi2/apache/bin/httpd -X -F -f/tdsi2/apache/conf/httpd.conf [New LWP 1] [New LWP 2] Program received signal SIGSEGV, Segmentation fault. 0xef5824b4 in _mp_move () from /usr/lib/libmp.so.1 (gdb) backtrace #0 0xef5824b4 in _mp_move () from /usr/lib/libmp.so.1 #1 0xef5822dc in pow () from /usr/lib/libmp.so.1 #2 0xee7e01ec in zif_round (ht=1, return_value=0x35d678, this_ptr=0x0, return_value_used=1) at math.c:141 #3 0xee6b9820 in execute (op_array=0x1f8880) at ./zend_execute.c:1598 #4 0xee6d2768 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at zend.c:810 #5 0xee6eecd0 in php_execute_script (primary_file=0xeffff810) at main.c:1381 #6 0xee6e6e08 in apache_php_module_main (r=0x3558b0, display_source_mode=0) at sapi_apache.c:90 #7 0xee6e83e4 in send_php (r=0x3558b0, display_source_mode=0, filename=0x356428 "/web/nddesalut.org/site/ecrire/naviguer.php3") at mod_php4.c:575 #8 0xee6e8468 in send_parsed_php (r=0x3558b0) at mod_php4.c:590 #9 0x0001d490 in ap_invoke_handler () #10 0x0003176c in process_request_internal () #11 0x00031b0c in ap_process_request () #12 0x00028324 in child_main () #13 0x00028588 in make_child () #14 0x00028c78 in standalone_main () #15 0x00029648 in main () (gdb) -- Edit bug report at http://bugs.php.net/?id=18301&edit=1 -- Fixed in CVS: http://bugs.php.net/fix.php?id=18301&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=18301&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=18301&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=18301&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=18301&r=support Expected behavior: http://bugs.php.net/fix.php?id=18301&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=18301&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=18301&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=18301&r=globals