Edit report at http://bugs.php.net/bug.php?id=49634&edit=1
ID: 49634
Updated by: felipe@php.net
Reported by: aldo at armiento dot com
Summary: Segfault throwing an exception in a XSL registered
function
Status: Open
Type: Bug
Package: XSLT related
Operating System: Linux Debian, Mac OSX
-PHP Version: 5.*, 6 (2009-09-23)
+PHP Version: 5.*
New Comment:
Interesting, it cannot be reproduced on trunk.
Previous Comments:
------------------------------------------------------------------------
[2010-06-21 23:51:10] felipe@php.net
I can reproduce it now. Probably I forgot to create the doc.xml to test
it in the first time.
------------------------------------------------------------------------
[2009-09-25 22:47:53] aldo at armiento dot com
Dear Mr. Jani,
my intermediate backtrace was in replying to felipe@php.net that says
that he can't reproduce it on Debian 32bit with libxslt 1.1.24-2 and
libxml2 2.6.32.
I installed a Debian Lenny 32bit from scratch to verify this affirmation
and I can reproduce it.
Best regards,
A.
------------------------------------------------------------------------
[2009-09-25 22:22:05] jani@php.net
Please don't spam the bug system, one time is enough. Also, there's no
need to add the backtrace especially when it's basically identical to
the first one.
------------------------------------------------------------------------
[2009-09-23 07:56:25] aldo at armiento dot com
Latest snapshot (php5.3-200909230630):
(gdb) r
Starting program: /home/armiento/env/spider/bin/php test_segfault.php
[Thread debugging using libthread_db enabled]
[New Thread 139866082309840 (LWP 1958)]
Exception!
Exception!
*** glibc detected *** free(): invalid pointer: 0x00000000019a65e0 ***
Program received signal SIGABRT, Aborted.
[Switching to Thread 139866082309840 (LWP 1958)]
0x00007f351ac7607b in raise () from /lib/libc.so.6
(gdb) bt
#0 0x00007f351ac7607b in raise () from /lib/libc.so.6
#1 0x00007f351ac7784e in abort () from /lib/libc.so.6
#2 0x00007f351acac5f9 in __fsetlocking () from /lib/libc.so.6
#3 0x00007f351acb3163 in mallopt () from /lib/libc.so.6
#4 0x00007f351acb31ee in free () from /lib/libc.so.6
#5 0x000000000044f3bb in php_libxml_node_decrement_resource
(object=0x7f351c24b730)
at /home/armiento/src/php5.3-200909230630/ext/libxml/libxml.c:1058
#6 0x00000000004cc3a5 in dom_objects_free_storage
(object=0x7f351c24b730)
at /home/armiento/src/php5.3-200909230630/ext/dom/php_dom.c:1017
#7 0x00000000006c0d56 in zend_objects_store_del_ref_by_handle_ex
(handle=3, handlers=<value optimized out>)
at
/home/armiento/src/php5.3-200909230630/Zend/zend_objects_API.c:220
#8 0x00000000006c0d92 in zend_objects_store_del_ref
(zobject=0x7f351c249510)
at
/home/armiento/src/php5.3-200909230630/Zend/zend_objects_API.c:172
#9 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24be60)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35
#10 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24bda0) at
/home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526
#11 0x00000000006a08a6 in _zval_dtor_func (zvalue=0x7f351c24bd70)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.c:43
#12 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24beb8)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35
#13 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24bcc8) at
/home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526
#14 0x00000000006a08a6 in _zval_dtor_func (zvalue=0x7f351c24bc98)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.c:43
#15 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24bf10)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35
#16 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24bbc0) at
/home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526
#17 0x00000000006a08a6 in _zval_dtor_func (zvalue=0x7f351c24bb90)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.c:43
#18 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24bf70)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35
#19 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24bae8) at
/home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526
#20 0x00000000006a08a6 in _zval_dtor_func (zvalue=0x7f351c24b110)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.c:43
#21 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24ba28)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35
#22 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24b950) at
/home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526
#23 0x00000000006bd6b9 in zend_object_std_dtor (object=0x7f351c24b7a0)
at /home/armiento/src/php5.3-200909230630/Zend/zend_objects.c:45
#24 0x00000000006bd6d9 in zend_objects_free_object_storage
(object=0x7a6)
at /home/armiento/src/php5.3-200909230630/Zend/zend_objects.c:114
#25 0x00000000006c0d56 in zend_objects_store_del_ref_by_handle_ex
(handle=7, handlers=<value optimized out>)
at
/home/armiento/src/php5.3-200909230630/Zend/zend_objects_API.c:220
#26 0x00000000006c0d92 in zend_objects_store_del_ref
(zobject=0x7f351c24c6a0)
at
/home/armiento/src/php5.3-200909230630/Zend/zend_objects_API.c:172
#27 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24b1d8)
at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35
#28 0x00000000006ae457 in _zend_hash_quick_add_or_update (ht=0xcfc5e8,
arKey=0x7f351c249380 "e", nKeyLength=2, h=5863242,
pData=0xcfc830, nDataSize=8, pDest=0x7f351a062118, flag=1) at
/home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:299
#29 0x00000000006c1f2e in ZEND_CATCH_SPEC_CV_HANDLER
(execute_data=0x7f351a062050)
at
/home/armiento/src/php5.3-200909230630/Zend/zend_vm_execute.h:1234
#30 0x00000000006c2bd1 in execute (op_array=0x7f351c246578) at
/home/armiento/src/php5.3-200909230630/Zend/zend_vm_execute.h:104
#31 0x00000000006a0b1d in zend_execute_scripts (type=8, retval=0x0,
file_count=3)
at /home/armiento/src/php5.3-200909230630/Zend/zend.c:1188
#32 0x00000000006515f5 in php_execute_script
(primary_file=0x7fff24282950)
at /home/armiento/src/php5.3-200909230630/main/main.c:2214
#33 0x00000000007248f6 in main (argc=2, argv=0x7fff24282bb8) at
/home/armiento/src/php5.3-200909230630/sapi/cli/php_cli.c:1190
(gdb)
------------------------------------------------------------------------
[2009-09-23 06:25:39] jani@php.net
Please try using this snapshot:
http://snaps.php.net/php5.3-latest.tar.gz
For Windows:
http://windows.php.net/snapshots/
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/bug.php?id=49634--
Edit this bug report at http://bugs.php.net/bug.php?id=49634&edit=1