Bug #55037 [NEW]: php_zval_filter_recursive segfault

From: Operating system: Linux PHP version: 5.3SVN-2011-06-12 (SVN) Package: Filter related Bug Type: Bug Bug description:php_zval_filter_recursive segfault Description: ------------ Hi: php_zval_filter_recursive segfaults once in a while, with the following backtrace Test script: --------------- Program terminated with signal 11, Segmentation fault. #0 0x00007fb81e3a58a2 in php_zval_filter_recursive (value=0x7fb823d86768, filter=140736822777868, flags=140736822777848, options=0x7fb823d86790, copy=<value optimized out>, charset=0x0) at /usr/src/debug/php-5.3.6.201106102115/ext/filter/filter.c:524 529 if (Z_TYPE_PP(element) == IS_ARRAY) { (gdb) bt full #0 0x00007fb81e3a58a2 in php_zval_filter_recursive (value=0x7fb823d86768, filter=140736822777868, flags=140736822777848, options=0x7fb823d86790, copy=<value optimized out>, charset=0x0) at /usr/src/debug/php-5.3.6.201106102115/ext/filter/filter.c:524 element = 0x0 pos = 0x7fb823d86790 #1 0x0000000000000000 in ?? () Im not familiar with the code so Im not sure if checking element != NULL is a correct fix., Expected result: ---------------- ----------- Actual result: -------------- ------------------------------ -- Edit bug report at http://bugs.php.net/bug.php?id=55037&edit=1 -- Try a snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=55037&r=trysnapshot52 Try a snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=55037&r=trysnapshot53 Try a snapshot (trunk): http://bugs.php.net/fix.php?id=55037&r=trysnapshottrunk Fixed in SVN: http://bugs.php.net/fix.php?id=55037&r=fixed Fixed in SVN and need be documented: http://bugs.php.net/fix.php?id=55037&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=55037&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=55037&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=55037&r=needscript Try newer version: http://bugs.php.net/fix.php?id=55037&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=55037&r=support Expected behavior: http://bugs.php.net/fix.php?id=55037&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=55037&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=55037&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=55037&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=55037&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=55037&r=dst IIS Stability: http://bugs.php.net/fix.php?id=55037&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=55037&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=55037&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=55037&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=55037&r=mysqlcfg