#50359 [Opn->Fbk]: Random crash on new SoapServer
| From: | jani@php.net | Date: | Wed, 02 Dec 2009 13:58:42 +0000 |
| Subject: | #50359 [Opn->Fbk]: Random crash on new SoapServer | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-145331@lists.php.net to get a copy of this message | ||
ID: 50359
Updated by: jani@php.net
Reported By: datacompboy at call2ru dot com
-Status: Open
+Status: Feedback
-Bug Type: Reproducible crash
+Bug Type: SOAP related
Operating System: Linux 2.6.31-1-amd64
PHP Version: 5.2.11
New Comment:
Please try using this snapshot:
http://snaps.php.net/php5.2-latest.tar.gz
For Windows:
http://windows.php.net/snapshots/
And do not add any 3rd party patches (Suhosin) or load any zend
extensions (apc, etc.) when you produce the backtrace. Also, simple
backtrace is usually quite enough, just bt..
Previous Comments:
------------------------------------------------------------------------
[2009-12-02 12:16:00] datacompboy at call2ru dot com
Description:
------------
Sometimes (from 1-2-3 times in a day to 1 time at 3-4 days)
every-minute cron, that fetches from WS, written via SoapServer gets
"Bad Gateway" reply.
On server-side there an
[notice] child pid 1892 exit signal Segmentation fault (11)
in error.log
and one of:
kernel: [3878097.399362] php[23893]: segfault at 7fa3e51aded0 ip
7fa3e51aded0 sp 7fa3e35f0128 error 14 in
librt-2.9.so[7fa3e9822000+7000]
kernel: [3879416.960444] php[24282]: segfault at 7ff7addc9edb ip
7ff7ab8024d7 sp 7ff7ac20bca0 error 4 in
libgcc_s.so.1[7ff7ab7f1000+1a000]
in dmesg.
After suhosin enabled in sumulation mode, there
[error] [client 87.106.137.135] ALERT-SIMULATION - canary mismatch on
efree() - heap overflow detected (attacker '87.106.137.135', file
'/var/www/yii/framework/web/services/CWebService.php', line 154)
messages.
Same request executed right after error works fine.
So, i have enabled buffer overflow coredump in suhosin, and here an
coredump attached.
Can't post full reproduce code, since crash very random.
System is dual-core Opteron.
PHP 5.2.11-1 with Suhosin-Patch 0.9.7 (cli) (built: Sep 20 2009
11:41:46)
Copyright (c) 1997-2009 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies
with Suhosin v0.9.29, Copyright (c) 2007, by SektionEins GmbH
Reproduce code:
---------------
Dies every time on
$server=new SoapServer($this->wsdlUrl,$this->getOptions());
where
$this->wsdlUrl = "http://dev-eworld.direktbill.de/y/wsdl/quote";
Expected result:
----------------
Always works
Actual result:
--------------
#0 0x00007f699b9c566b in suhosin_log () from
/usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#1 0x00007f69a402e1dd in _zend_mm_free_int (heap=0xf3eb40,
p=0x1374360)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_alloc.c:2036
check = 18433888
mm_block = 0x1374338
next_block = 0x7f69a4537e40
size = 0
#2 0x00007f69a401927b in php_stream_tidy_wrapper_error_log
(wrapper=0x7f69a4537e40)
at /tmp/buildd/php5-5.2.11.dfsg.1/main/streams/streams.c:195
i = 1
#3 0x00007f69a401aae5 in _php_stream_open_wrapper_ex (path=0x1194760
"http://dev-eworld.direktbill.de/y/wsdl/quote",
mode=0x7f69a25c51a0 "\220\066\350\246i\177", options=12,
opened_path=0x0, context=0x131ec40)
at /tmp/buildd/php5-5.2.11.dfsg.1/main/streams/streams.c:1899
stream = 0x131ec40
wrapper = 0x7f69a4537e40
path_to_open = 0x10814a8 "@~S\244i\177"
persistent = 0
copy_of_path = 0x7fffe4fe11ef ""
#4 0x00007f69a3e63b89 in php_libxml_streams_IO_open_wrapper (
filename=0x1194760 "http://dev-eworld.direktbill.de/y/wsdl/quote",
mode=0x7f69a40c6d7f "rb", read_only=1)
at /tmp/buildd/php5-5.2.11.dfsg.1/ext/libxml/libxml.c:323
ssbuf = {sb = {st_dev = 2749774729, st_ino = 23387733, st_nlink
= 2803224128, st_mode = 20143263, st_uid = 0,
st_gid = 2803224128, __pad0 = 32617, st_rdev = 20143287,
st_size = 14, st_blksize = 20143256, st_blocks = 0,
st_atim = {tv_sec = 20325376, tv_nsec = 2800236510},
st_mtim = {tv_sec = 4, tv_nsec = 2720850652}, st_ctim = {
tv_sec = 18445520, tv_nsec = 0}, __unused = {18824016, 0,
18433888}}}
context = 0x7fffe4fe11ef
wrapper = 0x1
resolved_path = 0x1194760
"http://dev-eworld.direktbill.de/y/wsdl/quote"
path_to_open = 0x11aa650 "\360M\031\001"
ret_val = 0x7fffe4fe11ef
isescaped = 0
uri = 0x1205bb0
#5 0x00007f69a3e63cb1 in php_libxml_input_buffer_create_filename
(URI=0x1 <Address 0x1 out of bounds>,
enc=XML_CHAR_ENCODING_NONE) at
/tmp/buildd/php5-5.2.11.dfsg.1/ext/libxml/libxml.c:332
ret = 0x0
context = 0x11aa650
#6 0x00007f69a22a34cc in xmlNewInputFromFile () from
/usr/lib/libxml2.so.2
No symbol table info available.
#7 0x00007f69a22cef32 in ?? () from /usr/lib/libxml2.so.2
No symbol table info available.
#8 0x00007f69a22ce53f in xmlLoadExternalEntity () from
/usr/lib/libxml2.so.2
No symbol table info available.
#9 0x00007f69a22a7744 in xmlCreateURLParserCtxt () from
/usr/lib/libxml2.so.2
No symbol table info available.
#10 0x00007f69a3f5867e in soap_xmlParseFile (filename=0x1 <Address 0x1
out of bounds>)
at /tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/php_xml.c:91
ctxt = 0x7fffe4fe1578
ret = 0x7f69a4547d60
old_allow_url_fopen = 1 '\001'
#11 0x00007f69a3f50be3 in load_wsdl_ex (this_ptr=0x0, struri=0x1335c98
"http://dev-eworld.direktbill.de/y/wsdl/quote",
ctx=0x7fffe4fe1570, include=0) at
/tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/php_sdl.c:299
tmpsdl = 0x1362400
wsdl = 0x1335c98
root = 0x1335c98
definitions = 0x7fffe4fe1578
trav = 0x2d
targetNamespace = 0x7fffe4fe11ef
#12 0x00007f69a3f5280f in load_wsdl (this_ptr=0x1338930,
struri=0x1335c98 "http://dev-eworld.direktbill.de/y/wsdl/quote")
at /tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/php_sdl.c:713
ctx = {sdl = 0x0, docs = {nTableSize = 20325376, nTableMask =
0, nNumOfElements = 8, nNextFreeElement = 0,
pInternalPointer = 0x0, pListHead = 0x0, pListTail = 0x0,
arBuckets = 0x0, pDestructor = 0x1338c08,
persistent = 48 '0', nApplyCount = 230 '\346',
bApplyProtection = 244 '\364'}, messages = {nTableSize = 65536,
nTableMask = 0, nNumOfElements = 8, nNextFreeElement = 0,
pInternalPointer = 0x0, pListHead = 0x0,
pListTail = 0x0, arBuckets = 0x0, pDestructor = 0x1388920,
persistent = 0 '\000', nApplyCount = 0 '\000',
bApplyProtection = 0 '\000'}, bindings = {nTableSize =
65536, nTableMask = 0, nNumOfElements = 8,
nNextFreeElement = 0, pInternalPointer = 0x0, pListHead =
0x0, pListTail = 0x0, arBuckets = 0x0,
pDestructor = 0x1339b28, persistent = 0 '\000', nApplyCount
= 0 '\000', bApplyProtection = 0 '\000'}, portTypes = {
nTableSize = 65536, nTableMask = 0, nNumOfElements = 8,
nNextFreeElement = 0, pInternalPointer = 0x0,
pListHead = 0x0, pListTail = 0x0, arBuckets = 0x0,
pDestructor = 0x1375db8, persistent = 0 '\000',
nApplyCount = 0 '\000', bApplyProtection = 0 '\000'},
services = {nTableSize = 65536, nTableMask = 0,
nNumOfElements = 8, nNextFreeElement = 0, pInternalPointer
= 0x0, pListHead = 0x0, pListTail = 0x0,
arBuckets = 0x0, pDestructor = 0x1375e28, persistent = 0
'\000', nApplyCount = 0 '\000',
bApplyProtection = 0 '\000'}, attributes = 0x10000,
attributeGroups = 0x0, context = 0x0, old_header = 0x0}
i = 32767
n = -453110272
#13 0x00007f69a3f53eaa in get_sdl (this_ptr=0x1338930, uri=0x17ee4a0
"\200F\b\244i\177", cache_wsdl=0)
at /tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/php_sdl.c:3266
fn =
"\336\067\350\246i\177\000\000\240\034\376\344\377\177\000\000\000\000\000\000\000\000\000\000h\000\000\000\000\000
\000\000\200\001\000\000\000\000\000\000\204\262\226\316\363\243\273\367\316\370\061\217\066p\214\361.\a\346)\203o\314\002VG\355
o\177\321\b\304x+\v\245\230\313+\256\207\354B\220\267U\346-O\376\214\306o_U\n\353\276\354\067\016\222\362\026\340\031\376\344\37
7\177\000\000\217â¬\001\000\000\000\000
\a\000\000\000\000\000\000\a\000\000v\000\000\000o\a\000\000\000\000\000\000<lA\001o\20
7\000\000/ï¬\001\000\000\000\000
\023\"\001\000\000\000\000\006\000\000\000\006\000\000\000
\023\"\001\000\000\000\000\000\200\0
00\000o\a\000\000\060ï¬\001\000\000\000\000\320\032\376\344\037\000\000\000\324\001\000\000\000\000\000\000s\361\000\000\000\000
\000\000\202\361\000\000\000\000\000\000\370\364\000\000\000\000\000\000\026\000\000\000\000\000\000\000\020\222;\001\000\000\00
0\000\t\000\000\000\000\000\000\000"...
sdl = 0x0
old_error_code = 0x125d7f8 "\002Xx\001"
uri_len = 32617
context = 0x0
tmp = 0x7f69a426ce56
proxy_host = 0xe
proxy_port = 0x0
orig_context = 0x0
new_context = 0x1338448
headers = {c = 0x1782878 "\260\022\t\244i\177", len = 0, a = 0}
key = 0x2ca4548500 <Address 0x2ca4548500 out of bounds>
t = 0
#14 0x00007f69a3f236b6 in zim_SoapClient_SoapClient (ht=0,
return_value=0x7f69a429c6e8, return_value_ptr=0x7f699b9c535d,
this_ptr=0x1375318, return_value_used=1697478245) at
/tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/soap.c:2505
__orig_bailout = 0x7fffe4fe4100
__bailout = {{__jmpbuf = {3841902352, 32767, 23, 0, 3622280798,
2203380534, 22, 0}, __mask_was_saved = -1216373154,
__saved_mask = {__val = {0, 0, 3841862000, 0, 3841902352,
32767, 3841902352, 32767, 3841902352, 32767, 8, 0,
17331736, 0, 8, 0}}}}
wsdl = 0x1318e80
options = 0x1263108
soap_version = 1
context = 0x0
cache_wsdl = 0
sdl = 0x0
typemap_ht = 0x0
_old_handler = 0 '\000'
_old_error_code = 0x13387a0 "\020u\b\001"
_old_error_object = 0x0
_old_soap_version = 0
_old_in_compilation = 0 '\000'
_old_in_execution = 0 '\000'
_old_current_execute_data = 0x1005e8500000001
#15 0x00007f699b9c7b4d in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#16 0x00007f69a4084271 in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe4100)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:202
return_reference = 1 '\001'
opline = 0x4
original_return_value = 0x10879c0
current_scope = 0x17345e8
current_this = 0x1a6dcd0
return_value_used = 0
should_change_scope = 115 's'
#17 0x00007f69a406d604 in execute (op_array=0x1733278) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x17345e8, function_state =
{function_symbol_table = 0x1758298, function = 0x10879c0,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x10879c0, op_array = 0x1733278, object = 0x1338930,
Ts = 0x7fffe4fe2e80, CVs = 0x7fffe4fe2e30,
original_in_execution = 1 '\001', symbol_table = 0x1758150,
prev_execute_data = 0x7fffe4fe4520, old_error_reporting =
0x0}
#18 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#19 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe4520)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x61a05e85bcd82f9b
original_return_value = 0x7fffe4fe4c08
current_scope = 0x1a14e80
current_this = 0x1a03b98
return_value_used = 0
should_change_scope = 254 '\376'
#20 0x00007f69a406d604 in execute (op_array=0x1a64198) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x1a14e80, function_state =
{function_symbol_table = 0x1758150, function = 0x1733278,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1733278, op_array = 0x1a64198, object = 0x173cea0,
Ts = 0x7fffe4fe4380, CVs = 0x7fffe4fe4360,
original_in_execution = 1 '\001', symbol_table = 0x1758050,
prev_execute_data = 0x7fffe4fe4c40, old_error_reporting =
0x0}
#21 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#22 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe4c40)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x174b9c8
original_return_value = 0x7fffe4fe71f0
current_scope = 0x174ba68
current_this = 0x17415e0
return_value_used = 0
should_change_scope = 116 't'
#23 0x00007f69a406d604 in execute (op_array=0x1749510) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x174ba68, function_state =
{function_symbol_table = 0x1758050, function = 0x1a64198,
reserved = {0x100000000010000, 0x1, 0x186c927,
0x7fff00000001}}, fbc = 0x1a64198, op_array = 0x1749510,
object = 0x1a6c190, Ts = 0x7fffe4fe47a0, CVs =
0x7fffe4fe4780, original_in_execution = 1 '\001',
symbol_table = 0x1b04ac8, prev_execute_data = 0x7fffe4fe7220,
old_error_reporting = 0x0}
#24 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#25 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe7220)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x7f69a40b3652
original_return_value = 0x7fffe4fe76b0
current_scope = 0x1a14838
current_this = 0x19ffbb8
return_value_used = 0
should_change_scope = 0 '\000'
#26 0x00007f69a406d604 in execute (op_array=0x1a003e8) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x1a14838, function_state =
{function_symbol_table = 0x1b04ac8, function = 0x1749510,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1749510, op_array = 0x1a003e8, object = 0x1a6d380,
Ts = 0x7fffe4fe4ec0, CVs = 0x7fffe4fe4ea0,
original_in_execution = 1 '\001', symbol_table = 0x1ace190,
prev_execute_data = 0x7fffe4fe76e0, old_error_reporting =
0x0}
#27 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#28 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe76e0)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x7f69a402f2d8
original_return_value = 0x7fffe4fe7a30
current_scope = 0x1a03140
current_this = 0x19ffbb8
return_value_used = 0
should_change_scope = 160 '\240'
#29 0x00007f69a406d604 in execute (op_array=0x1a28bc0) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x1a03140, function_state =
{function_symbol_table = 0x1ace190, function = 0x1a003e8,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1a003e8, op_array = 0x1a28bc0, object = 0x1a6c190,
Ts = 0x7fffe4fe74a0, CVs = 0x7fffe4fe7480,
original_in_execution = 1 '\001', symbol_table = 0x1aa8f10,
prev_execute_data = 0x7fffe4fe7a60, old_error_reporting =
0x0}
#30 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#31 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe7a60)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x173d190
original_return_value = 0x7fffe4fe80a8
current_scope = 0x1754288
current_this = 0x17403f8
return_value_used = 0
should_change_scope = 115 's'
#32 0x00007f69a406d604 in execute (op_array=0x1752e18) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x1754288, function_state =
{function_symbol_table = 0x1aa8f10, function = 0x1a28bc0,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1a28bc0, op_array = 0x1752e18, object = 0x1a6c190,
Ts = 0x7fffe4fe7960, CVs = 0x7fffe4fe7940,
original_in_execution = 1 '\001', symbol_table = 0x1aa92a0,
prev_execute_data = 0x7fffe4fe8180, old_error_reporting =
0x0}
#33 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#34 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe8180)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x1a6d808
original_return_value = 0x7fffe4fe85a8
current_scope = 0x174b798
current_this = 0x17415e0
return_value_used = 0
should_change_scope = 2 '\002'
#35 0x00007f69a406d604 in execute (op_array=0x1749510) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x174b798, function_state =
{function_symbol_table = 0x1aa92a0, function = 0x1752e18,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1752e18, op_array = 0x1749510, object = 0x1753430,
Ts = 0x7fffe4fe7ce0, CVs = 0x7fffe4fe7cc0,
original_in_execution = 1 '\001', symbol_table = 0x1aa6d68,
prev_execute_data = 0x7fffe4fe8600, old_error_reporting =
0x0}
#36 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#37 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe8600)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x1a2cf28
original_return_value = 0x7fffe4fe8b40
current_scope = 0x1a2b7b8
current_this = 0x1a03b98
return_value_used = 0
should_change_scope = 162 '\242'
#38 0x00007f69a406d604 in execute (op_array=0x1a63ff8) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x1a2b7b8, function_state =
{function_symbol_table = 0x1aa6d68, function = 0x1749510,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1749510, op_array = 0x1a63ff8, object = 0x1a6d380,
Ts = 0x7fffe4fe8410, CVs = 0x7fffe4fe83e0,
original_in_execution = 1 '\001', symbol_table = 0x1aa5310,
prev_execute_data = 0x7fffe4fe8c40, old_error_reporting =
0x0}
#39 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#40 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe8c40)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x7fffe4fe8c40
original_return_value = 0x7fffe4fe9118
current_scope = 0x1a2a810
current_this = 0x1a03b98
return_value_used = 0
should_change_scope = 254 '\376'
#41 0x00007f69a406d604 in execute (op_array=0x1a63e50) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x1a2a810, function_state =
{function_symbol_table = 0x1aa5310, function = 0x1a63ff8,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1a63ff8, op_array = 0x1a63e50, object = 0x1a6c190,
Ts = 0x7fffe4fe8890, CVs = 0x7fffe4fe8860,
original_in_execution = 1 '\001', symbol_table = 0x1a9f8b0,
prev_execute_data = 0x7fffe4fe92e0, old_error_reporting =
0x0}
#42 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#43 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe92e0)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x7f69a4548508
original_return_value = 0x7fffe4fe9988
current_scope = 0x11ebbe0
current_this = 0x11dc3b0
return_value_used = 0
should_change_scope = 30 '\036'
#44 0x00007f69a406d604 in execute (op_array=0x11ed128) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x11ebbe0, function_state =
{function_symbol_table = 0x1a9f8b0, function = 0x1a63e50,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1a63e50, op_array = 0x11ed128, object = 0x1a6c190,
Ts = 0x7fffe4fe8ee0, CVs = 0x7fffe4fe8ea0,
original_in_execution = 1 '\001', symbol_table = 0x1a9f6c8,
prev_execute_data = 0x7fffe4fe99c0, old_error_reporting =
0x0}
#45 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#46 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe99c0)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x7f69a4548508
original_return_value = 0x7fffe4fe9da0
current_scope = 0x11df6e8
current_this = 0x11dc3b0
return_value_used = 0
should_change_scope = 29 '\035'
#47 0x00007f69a406d604 in execute (op_array=0x1158058) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x11df6e8, function_state =
{function_symbol_table = 0x1a9f6c8, function = 0x11ed128,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x11ed128, op_array = 0x1158058, object = 0x1157c00,
Ts = 0x7fffe4fe9570, CVs = 0x7fffe4fe9540,
original_in_execution = 1 '\001', symbol_table = 0x1153210,
prev_execute_data = 0x7fffe4fe9f10, old_error_reporting =
0x0}
#48 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#49 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fe9f10)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x61a05e85bcd82f9b
original_return_value = 0x7fffe4fea3a0
current_scope = 0x1894098
current_this = 0x11bf108
return_value_used = 0
should_change_scope = 254 '\376'
#50 0x00007f69a406d604 in execute (op_array=0x1a95850) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x1894098, function_state =
{function_symbol_table = 0x1153210, function = 0x1158058,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1158058, op_array = 0x1a95850, object = 0x1157c00,
Ts = 0x7fffe4fe9c30, CVs = 0x7fffe4fe9c20,
original_in_execution = 1 '\001', symbol_table = 0x1151d00,
prev_execute_data = 0x7fffe4fea3d0, old_error_reporting =
0x0}
#51 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#52 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC
(execute_data=0x7fffe4fea3d0)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234
opline = 0x11563e8
original_return_value = 0x7fffe4fea5d8
current_scope = 0x11529f0
current_this = 0x0
return_value_used = 0
should_change_scope = 21 '\025'
#53 0x00007f69a406d604 in execute (op_array=0x1151990) at
/tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92
execute_data = {opline = 0x11529f0, function_state =
{function_symbol_table = 0x1151d00, function = 0x1a95850,
reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc
= 0x1a95850, op_array = 0x1151990, object = 0x1157c00,
Ts = 0x7fffe4fea190, CVs = 0x7fffe4fea170,
original_in_execution = 0 '\000', symbol_table = 0x7f69a4548688,
prev_execute_data = 0x0, old_error_reporting = 0x0}
#54 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so
No symbol table info available.
#55 0x00007f69a4049a38 in zend_execute_scripts (type=32767, retval=0x0,
file_count=-453073448)
at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend.c:1215
files = 0x7fffe4fea5a8
i = 1
file_handle = 0x7fffe4fec990
orig_op_array = 0x800000003
orig_retval_ptr_ptr = 0x0
local_retval = 0x1
#56 0x00007f69a4004968 in php_execute_script (primary_file=0x19ed780)
at /tmp/buildd/php5-5.2.11.dfsg.1/main/main.c:2041
__orig_bailout = 0x0
__bailout = {{__jmpbuf = {3841893840, 32767, 2751765048, 32617,
2, 32617, 2245244407, 3771558564},
__mask_was_saved = -453073448, __saved_mask = {__val = {3,
8, 0, 0, 0, 0, 40, 0, 3841894096, 32767, 3841893856,
32767, 0, 0, 1, 0}}}}
prepend_file_p = 0x0
append_file_p = 0x0
prepend_file = {type = 0 '\000', filename = 0x0, opened_path =
0x0, handle = {fd = 0, fp = 0x0, stream = {
handle = 0x0, reader = 0, closer = 0, fteller =
0x7fffe4fec890, interactive = 0}}, free_filename = 72 'H'}
append_file = {type = 0 '\000', filename = 0x0, opened_path =
0x0, handle = {fd = 0, fp = 0x0, stream = {handle = 0x0,
reader = 0, closer = 0, fteller = 0, interactive = 0}},
free_filename = 0 '\000'}
retval = 0
#57 0x00007f69a40bf555 in php_handler (r=0x140d510) at
/tmp/buildd/php5-5.2.11.dfsg.1/sapi/apache2handler/sapi_apache2.c:651
__bailout = {{__jmpbuf = {18398280, 0, 120, 0, 3563167326,
2106055757, 21021768, 0}, __mask_was_saved = 194092638,
__saved_mask = {__val = {0, 9, 0, 9, 4294967295,
4294967295, 4294967295, 4294967295, 4294967295, 4294967295,
3841903180, 32767, 4294967295, 4294967295, 4294967295,
4294967295}}}}
ctx = 0x1185670
conf = 0x140c448
brigade = 0x0
bucket = 0x7fffe4fe11ef
rv = -453111313
parent_req = 0x1
#58 0x000000000043ba93 in ap_run_handler ()
No symbol table info available.
#59 0x000000000043f0ef in ap_invoke_handler ()
No symbol table info available.
#60 0x000000000044c280 in ap_internal_redirect ()
No symbol table info available.
#61 0x00007f69a18bdba5 in ?? () from
/usr/lib/apache2/modules/mod_rewrite.so
No symbol table info available.
#62 0x000000000043ba93 in ap_run_handler ()
No symbol table info available.
#63 0x000000000043f0ef in ap_invoke_handler ()
No symbol table info available.
#64 0x000000000044c418 in ap_process_request ()
No symbol table info available.
#65 0x00000000004494f8 in ?? ()
No symbol table info available.
#66 0x0000000000443193 in ap_run_process_connection ()
No symbol table info available.
#67 0x0000000000450a7b in ?? ()
No symbol table info available.
#68 0x0000000000450d44 in ?? ()
No symbol table info available.
#69 0x000000000045195e in ap_mpm_run ()
No symbol table info available.
#70 0x0000000000428711 in main ()
No symbol table info available.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=50359&edit=1