#49893 [Bgs]: Apache 2.2 Child crash while creating an instance of Zend_Mail_Storage_Pop3

From: Date: Mon, 19 Oct 2009 21:38:00 +0000
Subject: #49893 [Bgs]: Apache 2.2 Child crash while creating an instance of Zend_Mail_Storage_Pop3
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-143710@lists.php.net to get a copy of this message 
 ID:               49893
 User updated by:  greubel at nkey dot de
 Reported By:      greubel at nkey dot de
 Status:           Bogus
 Bug Type:         Reproducible crash
 Operating System: Windows Vista
 PHP Version:      5.3.0
 New Comment:

I was able to get a little bit deeper. The exception has occured inside
the GC_ZOBJ_CHECK_POSSIBLE_ROOT macro.

php5ts!gc_zval_possible_root+0x61:
01483381 8a540101        mov     dl,byte ptr [ecx+eax+1]   
ds:0023:79d86981=??

Marked line in source view is 

GC_ZOBJ_CHECK_POSSIBLE_ROOT(zv);


Previous Comments:
------------------------------------------------------------------------

[2009-10-19 21:07:56] greubel at nkey dot de

I see now, it has nothing to do with Zend Framework. The access
violation is occured in the garbage collector component in PHP. Please
take this analysis dump for more information:

Type of Analysis Performed   Crash Analysis 
Machine Name   CALLIPSO 
Operating System   Windows Vista Service Pack 2 
Number Of Processors   2 
Process ID   3812 
Process Image   C:\Program Files\Apache Software
Foundation\Apache2.2\bin\httpd.exe 
System Up-Time   02:29:04 
Process Up-Time   00:04:32 


Thread 1 - System ID 5184
Entry point   msvcrt!_endthreadex+6f 
Create time   19.10.2009 22:20:47 
Time spent in user mode   0 Days 0:0:0.15 
Time spent in kernel mode   0 Days 0:0:0.0 






Function     Arg 1     Arg 2     Arg 3   Source 
php5ts!gc_zval_possible_root+61     03d5fc00     0251c278     00000000 
  
php5ts!ZEND_ASSIGN_SPEC_CV_VAR_HANDLER+69     01a3fbc0     0251c278    
01a3fe3c    
php5ts!execute+29e     03d91014     0251c200     00000000    
php5ts!zend_execute_scripts+f6     00000008     0251c278     00000000  
 
php5ts!php_execute_script+22d     01a3fe3c     0251c278     00000004   

php5apache2_2!php_handler+5d0     01fec1a8     00954208     01fec1a8   

libhttpd!ap_run_handler+21     01fec1a8     01fec1a8     01fec1a8    
libhttpd!ap_invoke_handler+ae     00000000     02534cb8     01a3ff00   

libhttpd!ap_die+29e     01fec1a8     00000000     01fd51c0    
libhttpd!ap_get_request_note+1ccc     02534cb8     02534cb8    
02534cb8    
libhttpd!ap_run_process_connection+21     02534cb8     008a4ea0    
01a3ff48    
libhttpd!ap_process_connection+33     02534cb8     01fe4198    
00000000    
libhttpd!ap_regkey_value_remove+c7c     02534cb0     70ec09d9    
00000000    
msvcrt!_endthreadex+44     01a3ff94     7681d0e9     02131090    
msvcrt!_endthreadex+ce     02131090     01a3ffd4     779319bb    
kernel32!BaseThreadInitThunk+e     02131090     76bcf999     00000000  
 
ntdll!__RtlUserThreadStart+23     76432670     02131090     00000000   

ntdll!_RtlUserThreadStart+1b     76432670     02131090     00000000   





PHP5TS!GC_ZVAL_POSSIBLE_ROOT+61In
httpd__PID__3812__Date__10_19_2009__Time_10_25_19PM__378__Second_Chance_Exception_C0000005.dmp
the assembly instruction at php5ts!gc_zval_possible_root+61 in
C:\Program Files\PHP-5.3\php5ts.dll from The PHP Group has caused an
access violation exception (0xC0000005) when trying to read from memory
location 0x7fc66981 on thread 1

Module Information 
Image Name: C:\Program Files\PHP-5.3\php5ts.dll   Symbol Type:  PDB 
Base address: 0x01400000   Time Stamp:  Mon Jun 29 22:24:07 2009  
Checksum: 0x00000000   Comments:   
COM DLL: False   Company Name:  The PHP Group 
ISAPIExtension: False   File Description:  PHP Script Interpreter 
ISAPIFilter: False   File Version:  5.3.0 
Managed DLL: False   Internal Name:  PHP Script Interpreter 
VB DLL: False   Legal Copyright:  Copyright © 1997-2009 The PHP Group 
Loaded Image Name:  php5ts.dll   Legal Trademarks:  PHP 
Mapped Image Name:  C:\Program Files\PHP-5.3\php5ts.dll   Original
filename:  php5ts.dll 
Module name:  php5ts   Private Build:   
Single Threaded:  False   Product Name:  PHP 
Module Size:  5,44 MBytes   Product Version:  5.3.0 
Symbol File Name:  C:\Program Files\PHP-5.3\php5ts.pdb   Special Build:
 & 


I was not able to locate the exact point of the bug. Because I do not
have enough knowlegde about the PHP source code, I can not help further.
The symbols file seems to not contain any source information. I
downloaded it from
http://windows.php.net/downloads/releases/php-debug-pack-5.3.0-Win32-VC6-x86.zip.

Regards

------------------------------------------------------------------------

[2009-10-19 10:45:23] jani@php.net

Please don't post bugs in 3rd party frameworks as bugs in PHP. As long
as you're not able to provide a short reproducing code that does NOT
require this is not a bug.

------------------------------------------------------------------------

[2009-10-16 00:21:22] greubel at nkey dot de

I tried to find the source of the problem. If the
Zend_Mail_Protocol_Pop3 is used as class to create a communication
object, an exception is thrown instead of crash.

Used code:

<?php
require 'Zend/Mail/Protocol/Pop3.php';  
try {
	$acc = new Zend_Mail_Protocol_Pop3();
	$acc->connect('pop.gmx.de');
	$acc->login('someone@gmx.de', '');
}
catch(Exception $e)
{
	echo $e->getMessage();
	echo "<pre>";
	echo $e->getTraceAsString();
	echo "</pre>";
}
?>

The crashing method in Zend_Mail_Storage_Pop3 seems to be the
Zend_Mail_Protocol_Pop3::login() method call in the constructor.

------------------------------------------------------------------------

[2009-10-16 00:10:34] greubel at nkey dot de

<?php
require 'Zend/Mail/Storage/Pop3.php';

try {
	$acc = new Zend_Mail_Storage_Pop3(
		array(
      'host' => 'pop.gmx.de',
      'user' => 'someone@gmx.de',
      'password' => ''
		)
	);
}
catch(Exception $e)
{
	echo $e->getMessage();
	echo "<pre>";
	echo $e->getTraceAsString();
	echo "</pre>";
}
?>

------------------------------------------------------------------------

[2009-10-15 19:02:13] pajoye@php.net

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.



------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/49893

-- 
Edit this bug report at http://bugs.php.net/?id=49893&edit=1

Thread (18 messages)

« previous php.bugs (#143710) next »