Bug #54491 [Fbk->Opn]: Crash during shutdown sequence on apache module.

From: Date: Fri, 08 Apr 2011 15:05:12 +0000
Subject: Bug #54491 [Fbk->Opn]: Crash during shutdown sequence on apache module.
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-160036@lists.php.net to get a copy of this message
Edit report at http://bugs.php.net/bug.php?id=54491&edit=1

 ID:                 54491
 User updated by:    msamson at chowly dot com
 Reported by:        msamson at chowly dot com
-Summary:            Crash when using mongodb or couchdb database
                     adapters
+Summary:            Crash during shutdown sequence on apache module.
-Status:             Feedback
+Status:             Open
 Type:               Bug
 Package:            Reproducible crash
 Operating System:   Fedora 14 x64
 PHP Version:        5.3.6
 Block user comment: N
 Private report:     N

 New Comment:

No, the crash also occurs when the mongo.so extension is not loaded.

At first, it thought it was the culprit, but it happens without mongo
being 
loaded.

One thing, the CLI version seems to be more resilient, it needs more
data loaded 
to crash, whereas with the apache module, it's always crashing.

Chromium reports Error 324 (net::ERR_EMPTY_RESPONSE): Unknown error
when 
accessing a url.

I was able to get a backtrace (with no execute or zbacktrace output) and
around 
frame 30-ish, it specifies entering the shutdown sequence, cleaning up a
closure 
and then the crash.

Changing the summary to better reflect the problem.


Previous Comments:
------------------------------------------------------------------------
[2011-04-08 09:54:35] aharvey@php.net

Does PHP only crash when the mongo extension is loaded? If so, please
report this at http://pecl.php.net/package/mongo,
as bugs in PECL
extensions aren't dealt with in this bug tracker.

------------------------------------------------------------------------
[2011-04-08 06:28:38] msamson at chowly dot com

Finally got a backtrace:
/Zend/Zend_execute_API.c:437
437 Z_DELREF_PP(zval_ptr);

There is a mention in another frame about requesting php shutdown. Then
higher, it says it will cleanup a closure. Sadly, no execute and 
zbacktrace output was empty.

------------------------------------------------------------------------
[2011-04-08 05:27:10] msamson at chowly dot com

Description:
------------
PHP crash either as a httpd module or as cli with `zend_mm_heap
corrupted`.

Please see https://bugzilla.redhat.com/show_bug.cgi?id=694630

This was initially thought as a fedora packaging bug, but even a
compiled from 
source php is producing the same error.


Test script:
---------------
Please see https://bugzilla.redhat.com/show_bug.cgi?id=694630
for a
simple script.




Actual result:
--------------
Tested is using a 2 different virtual machines both running Fedora 14
x64. One 
with php from yum, the other compiled.

gdb reports no backtrace and says there is no stack.

Apache 2.2 crashes, running php-cli too.

relevant strace output:

  array(0) {
  }
}
		</div>
	</div>
</body>
</html>) = 1681
write(2, "zend_mm_heap corrupted\n", 23zend_mm_heap corrupted
) = 23
exit_group(1)                           = ?

Another one with sessions:
pwrite(3, "cart|a:1:{s:2:\"id\";C:7:\"MongoId\""..., 63, 0) = 63
close(3)                                = 0
close(4)                                = 0
write(2, "zend_mm_heap corrupted\n", 23zend_mm_heap corrupted
) = 23
exit_group(1)


It appears php is crashing at the end of the request just before
delivering the 
content, when a database of some sort is used.


------------------------------------------------------------------------



-- 
Edit this bug report at http://bugs.php.net/bug.php?id=54491&edit=1


Thread (11 messages)

« previous php.bugs (#160036) next »