Bug #55288 [Asn->Csd]: usort segfaults

From: Date: Fri, 29 Jul 2011 15:58:18 +0000
Subject: Bug #55288 [Asn->Csd]: usort segfaults
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-162274@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=55288&edit=1

 ID:                 55288
 Updated by:         laruence@php.net
 Reported by:        jstephens at qualtrics dot com
 Summary:            usort segfaults
-Status:             Assigned
+Status:             Closed
 Type:               Bug
 Package:            Arrays related
 Operating System:   Linux
 PHP Version:        5.3.6
 Assigned To:        laruence
 Block user comment: N
 Private report:     N



Previous Comments:
------------------------------------------------------------------------
[2011-07-29 15:34:37] laruence@php.net

This bug has been fixed in SVN.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.



------------------------------------------------------------------------
[2011-07-29 14:25:54] jstephens at qualtrics dot com

I tried php5.3-201107291230 and php5.3-201107290830 and they both worked.

------------------------------------------------------------------------
[2011-07-29 08:35:59] laruence@php.net

Please try using this snapshot:

  http://snaps.php.net/php5.3-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/

Please try using this snapshot:

 http://snaps.php.net/php5.3-201107290830.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/

------------------------------------------------------------------------
[2011-07-27 14:35:09] jstephens at qualtrics dot com

I just downloaded and compiled 5.3.6 from the website using "./configure
--enable-debug=yes" on a different machine (Ubuntu 11.04 x64) and was still able to reproduce
it.

Here's a better backtrace:

(gdb) run uSortCrash.php
Starting program: /home/jstephens/bin/php-5.3.6/sapi/cli/php uSortCrash.php
[Thread debugging using libthread_db enabled]
Sort...
Program received signal SIGSEGV, Segmentation fault.
0x00000000007f8f2f in zval_mark_grey (pz=0xfd1ab8) at
/home/jstephens/bin/php-5.3.6/Zend/zend_gc.c:372
372				pz = *(zval**)p->pData;
(gdb) bt
#0  0x00000000007f8f2f in zval_mark_grey (pz=0xfd1ab8) at
/home/jstephens/bin/php-5.3.6/Zend/zend_gc.c:372
#1  0x00000000007f91d9 in gc_mark_roots () at /home/jstephens/bin/php-5.3.6/Zend/zend_gc.c:435
#2  0x00000000007f9a8c in gc_collect_cycles () at /home/jstephens/bin/php-5.3.6/Zend/zend_gc.c:664
#3  0x00000000007e751d in zif_gc_collect_cycles (ht=0, return_value=0xfd93e0, return_value_ptr=0x0,
this_ptr=0x0, return_value_used=0)
    at /home/jstephens/bin/php-5.3.6/Zend/zend_builtin_functions.c:337
#4  0x000000000080751c in zend_do_fcall_common_helper_SPEC (execute_data=0x7ffff7ebe090) at
/home/jstephens/bin/php-5.3.6/Zend/zend_vm_execute.h:316
#5  0x000000000080ba8b in ZEND_DO_FCALL_SPEC_CONST_HANDLER (execute_data=0x7ffff7ebe090) at
/home/jstephens/bin/php-5.3.6/Zend/zend_vm_execute.h:1606
#6  0x0000000000806a1a in execute (op_array=0xff1800) at
/home/jstephens/bin/php-5.3.6/Zend/zend_vm_execute.h:107
#7  0x00000000007d4053 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at
/home/jstephens/bin/php-5.3.6/Zend/zend.c:1194
#8  0x000000000075e583 in php_execute_script (primary_file=0x7fffffffdf70) at
/home/jstephens/bin/php-5.3.6/main/main.c:2268
#9  0x00000000008b47dd in main (argc=2, argv=0x7fffffffe1d8) at
/home/jstephens/bin/php-5.3.6/sapi/cli/php_cli.c:1193

------------------------------------------------------------------------
[2011-07-27 14:13:22] jstephens at qualtrics dot com

I disabled all my extensions but, unfortunately, no dice.
I might add, we haven't been able to reproduce it with PHP versions before 5.3.6.

(gdb) run usortCrash.php
Starting program: /usr/bin/php usortCrash.php
[Thread debugging using libthread_db enabled]
Sort...
Program received signal SIGSEGV, Segmentation fault.
0x00000000005db586 in ?? ()
(gdb) bt
#0  0x00000000005db586 in ?? ()
#1  0x00000000005db610 in ?? ()
#2  0x00000000005dbef5 in gc_collect_cycles ()
#3  0x00000000005cee1d in ?? ()
#4  0x00000000005e6869 in ?? ()
#5  0x00000000005e5dcb in execute ()
#6  0x00000000005bf395 in zend_execute_scripts ()
#7  0x000000000056f628 in php_execute_script ()
#8  0x0000000000648ce0 in ?? ()
#9  0x00000033ad41d994 in __libc_start_main () from /lib64/libc.so.6
#10 0x0000000000422009 in _start ()

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=55288


-- 
Edit this bug report at https://bugs.php.net/bug.php?id=55288&edit=1

Thread (8 messages)

« previous php.bugs (#162274) next »