Bug #53569 [Opn]: Intermittent Seg Fault during DOMDocument clean up

Edit report at http://bugs.php.net/bug.php?id=53569&edit=1 ID: 53569 User updated by: chris dot richard at gmail dot com Reported by: chris dot richard at gmail dot com Summary: Intermittent Seg Fault during DOMDocument clean up Status: Open Type: Bug Package: DOM XML related -Operating System: Linux (Ubuntu) +Operating System: Linux (Ubuntu 10) -PHP Version: 5.3.4 +PHP Version: 5.3.2 Block user comment: N Private report: N New Comment: PHP 5.3.2 libxml 2.7.6 Previous Comments: ------------------------------------------------------------------------ [2010-12-18 06:11:31] chris dot richard at gmail dot com Description: ------------ libxml causes a seg fault *intermittently* after all PHP user code has finished running. I'm using DOMFragment to parse chunks of XHTML and append them to a DOMDocument which gets output (via saveHTML) once it's completely assembled. The output completes successfully but at least half the time I get seg fault related to the clean up of the DOMDocument and no response is sent to the client. Core Dump: #0 0x00007fb2f77c6e6f in xmlDictOwns () from /usr/lib/libxml2.so.2 #1 0x00007fb2f77276a7 in xmlFreeNodeList () from /usr/lib/libxml2.so.2 #2 0x00007fb2f76ff85f in ?? () from /usr/lib/libxml2.so.2 #3 0x00007fb2f772f256 in xmlHashFree () from /usr/lib/libxml2.so.2 #4 0x00007fb2f7727335 in xmlFreeDtd () from /usr/lib/libxml2.so.2 #5 0x00007fb2f772746a in xmlFreeDoc () from /usr/lib/libxml2.so.2 #6 0x00007fb2f8409d5b in php_libxml_decrement_doc_ref () from /usr/lib/apache2/modules/libphp5.so #7 0x00007fb2f842e8cf in ?? () from /usr/lib/apache2/modules/libphp5.so #8 0x00007fb2f8661adc in zend_objects_store_del_ref_by_handle_ex () from /usr/lib/apache2/modules/libphp5.so #9 0x00007fb2f8661b03 in zend_objects_store_del_ref () from /usr/lib/apache2/modules/libphp5.so #10 0x00007fb2f86301cd in _zval_ptr_dtor () from /usr/lib/apache2/modules/libphp5.so #11 0x00007fb2f8649198 in zend_hash_destroy () from /usr/lib/apache2/modules/libphp5.so #12 0x00007fb2f863c19f in _zval_dtor_func () from /usr/lib/apache2/modules/libphp5.so #13 0x00007fb2f86301cd in _zval_ptr_dtor () from /usr/lib/apache2/modules/libphp5.so #14 0x00007fb2f8649198 in zend_hash_destroy () from /usr/lib/apache2/modules/libphp5.so #15 0x00007fb2f865e0d9 in zend_object_std_dtor () from /usr/lib/apache2/modules/libphp5.so #16 0x00007fb2f865e0f9 in zend_objects_free_object_storage () from /usr/lib/apache2/modules/libphp5.so #17 0x00007fb2f8661adc in zend_objects_store_del_ref_by_handle_ex () from /usr/lib/apache2/modules/libphp5.so #18 0x00007fb2f8661b03 in zend_objects_store_del_ref () from /usr/lib/apache2/modules/libphp5.so #19 0x00007fb2f86301cd in _zval_ptr_dtor () from /usr/lib/apache2/modules/libphp5.so #20 0x00007fb2f8649198 in zend_hash_destroy () from /usr/lib/apache2/modules/libphp5.so #21 0x00007fb2f863c19f in _zval_dtor_func () from /usr/lib/apache2/modules/libphp5.so #22 0x00007fb2f86301cd in _zval_ptr_dtor () from /usr/lib/apache2/modules/libphp5.so #23 0x00007fb2f8649198 in zend_hash_destroy () from /usr/lib/apache2/modules/libphp5.so #24 0x00007fb2f865e0d9 in zend_object_std_dtor () from /usr/lib/apache2/modules/libphp5.so #25 0x00007fb2f865e0f9 in zend_objects_free_object_storage () from /usr/lib/apache2/modules/libphp5.so #26 0x00007fb2f86615ec in zend_objects_store_free_object_storage () from /usr/lib/apache2/modules/libphp5.so #27 0x00007fb2f86305c5 in ?? () from /usr/lib/apache2/modules/libphp5.so #28 0x00007fb2f863cee2 in ?? () from /usr/lib/apache2/modules/libphp5.so #29 0x00007fb2f85e8b75 in php_request_shutdown () from /usr/lib/apache2/modules/libphp5.so ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/bug.php?id=53569&edit=1