Bug #52841 [Bgs->Opn]: php crash on phpinfo(); using php_enchant

Edit report at http://bugs.php.net/bug.php?id=52841&edit=1 ID: 52841 Updated by: pajoye@php.net Reported by: raulsalitrero at gmail dot com Summary: php crash on phpinfo(); using php_enchant -Status: Bogus +Status: Open Type: Bug Package: Reproducible crash Operating System: Windows XP PHP Version: 5.3SVN-2010-09-14 (SVN) Block user comment: N New Comment: it is part of php.... Previous Comments: ------------------------------------------------------------------------ [2010-09-14 18:48:59] aharvey@php.net Bugs for PECL packages should be reported on the PECL bug tracker. Please report it using the "report new bug" link at http://pecl.php.net/package/enchant. ------------------------------------------------------------------------ [2010-09-14 18:37:02] raulsalitrero at gmail dot com the exception i get is: 0xC0000005: Infracción de acceso al leer la ubicación 0x00030005. (Read Access Infracion. Address:0x00030005) ------------------------------------------------------------------------ [2010-09-14 18:35:03] raulsalitrero at gmail dot com Description: ------------ php svn crashes when calling phpinfo() and having php_enchant loaded. apparently an uninitialñized pointer is passed around while invoking php_info_print_table_start(); the problem occurs only using php_enchant, any other extension, i havent seen this crash on any other extension, in fact im using php.ini-production modified only to load php_enchant and no other extension. i am using the lates sources from php 5.3 branch in svn. this bug started to happen recently, code from about one or two weeks ago doesn't crash. the following stack trace was obtained using vc2008 Test script: --------------- <?php phpinfo(); ?> Expected result: ---------------- phpinfo page shown. Actual result: -------------- php5ts.dll!_erealloc(void * ptr=0x00000000, unsigned int size=79, int allow_failure=0) Línea 2359 + 0x4 bytes C php5ts.dll!xbuf_format_converter(smart_str * xbuf=0x037cf93c, const char * fmt=0x00000000, char * ap=0x00000000) Línea 234 + 0x3f bytes C php5ts.dll!vspprintf(char * * pbuf=0x037cf968, unsigned int max_len=0, const char * format=0x022c6fe8, char * ap=0x037cf974) Línea 799 C php5ts.dll!php_printf(const char * format=0x022c6fe8, ...) Línea 626 C php5ts.dll!php_info_print_table_start() Línea 1040 + 0xa bytes C php_enchant.dll!zm_info_enchant(_zend_module_entry * zend_module=0x0266de20, void * * * tsrm_ls=0x025433f0) Línea 323 C php5ts.dll!php_info_print_module(_zend_module_entry * zend_module=0x0266de20, void * * * tsrm_ls=0x025433f0) Línea 103 + 0x8 bytes C php5ts.dll!_display_module_info_func(_zend_module_entry * module=0x0266de20, void * * * tsrm_ls=0x025433f0) Línea 123 + 0xb bytes C php5ts.dll!zend_hash_apply(_hashtable * ht=0x037cfa38, int (void *, void * * *)* apply_func=0x020b5fc0, void * * * tsrm_ls=0x025433f0) Línea 676 + 0x9 bytes C php5ts.dll!php_print_info(int flag=-1, void * * * tsrm_ls=0x025433f0) Línea 939 + 0x10 bytes C php5ts.dll!zif_phpinfo(int ht=0, _zval_struct * return_value=0x0389dfc8, _zval_struct * * return_value_ptr=0x00000000, _zval_struct * this_ptr=0x00000000, int return_value_used=0, void * * * tsrm_ls=0x025433f0) Línea 1254 C php5ts.dll!zend_do_fcall_common_helper_SPEC(_zend_execute_data * execute_data=0x038d0080, void * * * tsrm_ls=0x02543300) Línea 316 + 0x41 bytes C php5ts.dll!ZEND_DO_FCALL_SPEC_CONST_HANDLER(_zend_execute_data * execute_data=0x00000000, void * * * tsrm_ls=0x00000000) Línea 1606 + 0xe bytes C php5ts.dll!execute(_zend_op_array * op_array=0x0389db10, void * * * tsrm_ls=0x02543300) Línea 107 + 0xa bytes C php5ts.dll!zend_execute_scripts(int type=8, void * * * tsrm_ls=0x025433f0, _zval_struct * * retval=0x00000000, int file_count=3, ...) Línea 1195 C php5ts.dll!php_execute_script(_zend_file_handle * primary_file=0x037cfe5c, void * * * tsrm_ls=0x025433f0) Línea 2260 + 0x12 bytes C php5apache2_2.dll!php_handler(request_rec * r=0x025d34e8) Línea 669 + 0xe bytes C libhttpd.dll!ap_run_handler(request_rec * r=0x025d34e8) Línea 158 + 0x28 bytes C libhttpd.dll!ap_invoke_handler(request_rec * r=0x01596640) Línea 376 + 0x6 bytes C libhttpd.dll!ap_process_request(request_rec * r=0x025d34e8) Línea 286 C libhttpd.dll!ap_process_http_connection(conn_rec * c=0x025ce488) Línea 190 + 0x6 bytes C libhttpd.dll!ap_run_process_connection(conn_rec * c=0x025ce488) Línea 43 + 0x28 bytes C libhttpd.dll!ap_process_connection(conn_rec * c=0x025ce488, void * csd=0x025c7460) Línea 178 + 0x6 bytes C libhttpd.dll!worker_main(void * thread_num_val=0x025ce480) Línea 778 C ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/bug.php?id=52841&edit=1