#49390 [Opn->Bgs]: SEGV with zval_ptr_dtor

From: Date: Sat, 29 Aug 2009 01:22:16 +0000
Subject: #49390 [Opn->Bgs]: SEGV with zval_ptr_dtor
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-141684@lists.php.net to get a copy of this message 
 ID:               49390
 Updated by:       jani@php.net
 Reported By:      aya at eh dot org
-Status:           Open
+Status:           Bogus
-Bug Type:         Reproducible crash
+Bug Type:         Scripting Engine problem
 Operating System: Linux
 PHP Version:      5.3.0
 New Comment:

Please ask this kind of support questions on the internals@ mailing 
list.


Previous Comments:
------------------------------------------------------------------------

[2009-08-27 16:47:36] aya at eh dot org

Description:
------------
It seems that zval_ptr_dtor doesn't check if strings are
heap-allocated.

Reproduce code:
---------------
// Change this to zero to get a SEGV
int heapAllocate = 1;

// Make a string zval
zval* v;
MAKE_STD_ZVAL(v);
ZVAL_STRING(v, "foo", heapAllocate);

// SEGV happens here
zval_ptr_dtor(&v);

Expected result:
----------------
Nothing.

Actual result:
--------------
php-5.3.0/Zend/zend_execute_API.c(435) : Block 0x004014fa status:
php-5.3.0/Zend/zend_variables.c(36) : Actual location (location was
relayed)
Invalid pointer: ((thread_id=0x74706972) != (expected=0x96F6B8A0))



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=49390&edit=1

Thread (2 messages)

« previous php.bugs (#141684) next »