#49823 [Bgs]: Segmentation fault after infinite recursion loop, affects <= 5.2.11

From: Date: Fri, 09 Oct 2009 14:31:48 +0000
Subject: #49823 [Bgs]: Segmentation fault after infinite recursion loop, affects <= 5.2.11
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-143423@lists.php.net to get a copy of this message 
 ID:               49823
 User updated by:  radek dot karpowicz at gmail dot com
 Reported By:      radek dot karpowicz at gmail dot com
 Status:           Bogus
 Bug Type:         Reproducible crash
 Operating System: Gentoo/Linux
 PHP Version:      5.2.11
 New Comment:

There should be something like max_depth_level for functions... In php
5.3 it works fine.


Previous Comments:
------------------------------------------------------------------------

[2009-10-09 14:28:18] pajoye@php.net

See the other bug reports about that to get an explanation > bogus.

------------------------------------------------------------------------

[2009-10-09 14:27:00] radek dot karpowicz at gmail dot com

Description:
------------
After running php into infinite recursion loop by defining function and
executing it, binary will output segmentation fault.

Same bug here: #15522

http://bugs.php.net/bug.php?id=15522

Why it's not patched since 4.1.1?

Reproduce code:
---------------
<?php
function foo() {

  foo();
}

foo();
?>

Expected result:
----------------
Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to
allocate 261900 bytes) in /bug.php on line 4

Actual result:
--------------
Segmentation fault

GDB Trace:

Starting program: /php-5.2.11/sapi/cli/php -f /bug.php
[Thread debugging using libthread_db enabled]
[New Thread 0xb7be16c0 (LWP 832)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb7be16c0 (LWP 832)]
0x082d8a25 in zend_mm_check_ptr (heap=0x845f1d8, ptr=0x852040c,
silent=1, __zend_filename=0x8432a34
"/php-5.2.11/Zend/zend_vm_execute.h", __zend_lineno=766,
__zend_orig_filename=0x0, __zend_orig_lineno=0)
    at /home/radekk/tmp/php-5.2.11/Zend/zend_alloc.c:1439
1439			if (memcmp(end_magic, &_mem_block_end_magic, END_MAGIC_SIZE)==0)
{



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=49823&edit=1

Thread (3 messages)

« previous php.bugs (#143423) next »