Bug #51467 [NEW]: Crash in shutdown

From: Operating system: Mac OS X 10.6 PHP version: 5.3.2 Package: Reproducible crash Bug Type: Bug Bug description:Crash in shutdown Description: ------------ Executing certain scripts on Mac OS X 10.6 running 5.3.2 (or 5.3.1 or 5.3) causes a crash in the shutdown routine. The stack trace appears to be the same reported in http://bugs.php.net/bug.php?id=49209. See stack trace below. I uploaded a tarball named "shutdown_crasher.tar.gz" as a smallish sample demonstrating the flaw. "php displayDoc.php" shows the first crash noted below. Putting the files into an apache doc root and loading the index.html file shows two buttons. Clicking on one should cause apache to crash. (Oddly, one deployment always crashed with the "synchronous" call while another always crashed with the "async" call.) This crash is the second noted below. Test script: --------------- See tarball attached as a patch. Expected result: ---------------- I expected output without a crash. Actual result: -------------- Backtrace from php CLI: -------------------- Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x00000001434ed621 Crashed Thread: 0 Dispatch queue: com.apple.main-thread Thread 0 Crashed: Dispatch queue: com.apple.main-thread 0 php 0x000000010032aa3f gc_zval_possible_root + 99 1 php 0x000000010031ad97 zend_hash_destroy + 42 2 php 0x00000001001a2b35 sxe_object_free_storage + 53 3 php 0x000000010032f351 zend_objects_store_free_object_storage + 120 4 php 0x0000000100304ab1 shutdown_executor + 515 5 php 0x000000010030fce8 zend_deactivate + 111 6 php 0x00000001002c2fce php_request_shutdown + 597 7 php 0x000000010038c51f main + 5213 8 php 0x00000001000013b8 start + 52 -------------------- Backtrace from apache: -------------------- Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x00000001d074cc21 Crashed Thread: 0 Dispatch queue: com.apple.main-thread Thread 0 Crashed: Dispatch queue: com.apple.main-thread 0 libphp5.so 0x000000010131c64f gc_zval_possible_root + 99 1 libphp5.so 0x000000010130d58b zend_hash_destroy + 42 2 libphp5.so 0x000000010119e100 sxe_object_free_storage + 53 3 libphp5.so 0x0000000101320f05 zend_objects_store_free_object_storage + 120 4 libphp5.so 0x00000001012f76f2 shutdown_executor + 515 5 libphp5.so 0x0000000101302508 zend_deactivate + 111 6 libphp5.so 0x00000001012b6481 php_request_shutdown + 597 7 libphp5.so 0x000000010137cff9 php_handler + 1370 [apache stack removed] -------------------- -- Edit bug report at http://bugs.php.net/bug.php?id=51467&edit=1 -- Try a snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=51467&r=trysnapshot52 Try a snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=51467&r=trysnapshot53 Try a snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=51467&r=trysnapshot60 Fixed in SVN: http://bugs.php.net/fix.php?id=51467&r=fixed Fixed in SVN and need be documented: http://bugs.php.net/fix.php?id=51467&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=51467&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=51467&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=51467&r=needscript Try newer version: http://bugs.php.net/fix.php?id=51467&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=51467&r=support Expected behavior: http://bugs.php.net/fix.php?id=51467&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=51467&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=51467&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=51467&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=51467&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=51467&r=dst IIS Stability: http://bugs.php.net/fix.php?id=51467&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=51467&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=51467&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=51467&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=51467&r=mysqlcfg