Bug #52841 [NEW]: php crash on phpinfo(); using php_enchant

From: Operating system: Windows XP PHP version: 5.3SVN-2010-09-14 (SVN) Package: Reproducible crash Bug Type: Bug Bug description:php crash on phpinfo(); using php_enchant Description: ------------ php svn crashes when calling phpinfo() and having php_enchant loaded. apparently an uninitialñized pointer is passed around while invoking php_info_print_table_start(); the problem occurs only using php_enchant, any other extension, i havent seen this crash on any other extension, in fact im using php.ini-production modified only to load php_enchant and no other extension. i am using the lates sources from php 5.3 branch in svn. this bug started to happen recently, code from about one or two weeks ago doesn't crash. the following stack trace was obtained using vc2008 Test script: --------------- <?php phpinfo(); ?> Expected result: ---------------- phpinfo page shown. Actual result: -------------- php5ts.dll!_erealloc(void * ptr=0x00000000, unsigned int size=79, int allow_failure=0) Línea 2359 + 0x4 bytes C php5ts.dll!xbuf_format_converter(smart_str * xbuf=0x037cf93c, const char * fmt=0x00000000, char * ap=0x00000000) Línea 234 + 0x3f bytes C php5ts.dll!vspprintf(char * * pbuf=0x037cf968, unsigned int max_len=0, const char * format=0x022c6fe8, char * ap=0x037cf974) Línea 799 C php5ts.dll!php_printf(const char * format=0x022c6fe8, ...) Línea 626 C php5ts.dll!php_info_print_table_start() Línea 1040 + 0xa bytes C php_enchant.dll!zm_info_enchant(_zend_module_entry * zend_module=0x0266de20, void * * * tsrm_ls=0x025433f0) Línea 323 C php5ts.dll!php_info_print_module(_zend_module_entry * zend_module=0x0266de20, void * * * tsrm_ls=0x025433f0) Línea 103 + 0x8 bytes C php5ts.dll!_display_module_info_func(_zend_module_entry * module=0x0266de20, void * * * tsrm_ls=0x025433f0) Línea 123 + 0xb bytes C php5ts.dll!zend_hash_apply(_hashtable * ht=0x037cfa38, int (void *, void * * *)* apply_func=0x020b5fc0, void * * * tsrm_ls=0x025433f0) Línea 676 + 0x9 bytes C php5ts.dll!php_print_info(int flag=-1, void * * * tsrm_ls=0x025433f0) Línea 939 + 0x10 bytes C php5ts.dll!zif_phpinfo(int ht=0, _zval_struct * return_value=0x0389dfc8, _zval_struct * * return_value_ptr=0x00000000, _zval_struct * this_ptr=0x00000000, int return_value_used=0, void * * * tsrm_ls=0x025433f0) Línea 1254 C php5ts.dll!zend_do_fcall_common_helper_SPEC(_zend_execute_data * execute_data=0x038d0080, void * * * tsrm_ls=0x02543300) Línea 316 + 0x41 bytes C php5ts.dll!ZEND_DO_FCALL_SPEC_CONST_HANDLER(_zend_execute_data * execute_data=0x00000000, void * * * tsrm_ls=0x00000000) Línea 1606 + 0xe bytes C php5ts.dll!execute(_zend_op_array * op_array=0x0389db10, void * * * tsrm_ls=0x02543300) Línea 107 + 0xa bytes C php5ts.dll!zend_execute_scripts(int type=8, void * * * tsrm_ls=0x025433f0, _zval_struct * * retval=0x00000000, int file_count=3, ...) Línea 1195 C php5ts.dll!php_execute_script(_zend_file_handle * primary_file=0x037cfe5c, void * * * tsrm_ls=0x025433f0) Línea 2260 + 0x12 bytes C php5apache2_2.dll!php_handler(request_rec * r=0x025d34e8) Línea 669 + 0xe bytes C libhttpd.dll!ap_run_handler(request_rec * r=0x025d34e8) Línea 158 + 0x28 bytes C libhttpd.dll!ap_invoke_handler(request_rec * r=0x01596640) Línea 376 + 0x6 bytes C libhttpd.dll!ap_process_request(request_rec * r=0x025d34e8) Línea 286 C libhttpd.dll!ap_process_http_connection(conn_rec * c=0x025ce488) Línea 190 + 0x6 bytes C libhttpd.dll!ap_run_process_connection(conn_rec * c=0x025ce488) Línea 43 + 0x28 bytes C libhttpd.dll!ap_process_connection(conn_rec * c=0x025ce488, void * csd=0x025c7460) Línea 178 + 0x6 bytes C libhttpd.dll!worker_main(void * thread_num_val=0x025ce480) Línea 778 C -- Edit bug report at http://bugs.php.net/bug.php?id=52841&edit=1 -- Try a snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=52841&r=trysnapshot52 Try a snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=52841&r=trysnapshot53 Try a snapshot (trunk): http://bugs.php.net/fix.php?id=52841&r=trysnapshottrunk Fixed in SVN: http://bugs.php.net/fix.php?id=52841&r=fixed Fixed in SVN and need be documented: http://bugs.php.net/fix.php?id=52841&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=52841&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=52841&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=52841&r=needscript Try newer version: http://bugs.php.net/fix.php?id=52841&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=52841&r=support Expected behavior: http://bugs.php.net/fix.php?id=52841&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=52841&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=52841&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=52841&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=52841&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=52841&r=dst IIS Stability: http://bugs.php.net/fix.php?id=52841&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=52841&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=52841&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=52841&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=52841&r=mysqlcfg