Bug #55323 [Asn->Csd]: SoapClient segmentation fault when XSD_TYPEKIND_EXTENSION contains itself

Edit report at https://bugs.php.net/bug.php?id=55323&edit=1 ID: 55323 Updated by: dmitry@php.net Reported by: webm4st0r at gmail dot com Summary: SoapClient segmentation fault when XSD_TYPEKIND_EXTENSION contains itself -Status: Assigned +Status: Closed Type: Bug Package: SOAP related Operating System: Any PHP Version: Irrelevant Assigned To: dmitry Block user comment: N Private report: N New Comment: This bug has been fixed in SVN. Snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. For Windows: http://windows.php.net/snapshots/ Thank you for the report, and for helping us make PHP better. Previous Comments: ------------------------------------------------------------------------ [2011-08-10 13:44:45] dmitry@php.net Automatic comment from SVN on behalf of dmitry Revision: http://svn.php.net/viewvc/?view=revision&revision=314737 Log: Fixed bug #55323 (SoapClient segmentation fault when XSD_TYPEKIND_EXTENSION contains itself) ------------------------------------------------------------------------ [2011-08-01 23:51:15] webm4st0r at gmail dot com Updated the attached patch with one that appears to produce the correct results and passes all existing tests. ------------------------------------------------------------------------ [2011-07-30 08:43:59] webm4st0r at gmail dot com Description: ------------ While running a soap client in wsdl mode, if the response of a call contains an element which is an extension, and it contains itself, an infinite loop occurs in resulting in a segmentation fault. The provided patch is against 5.3.6, does not produce the expected results (but does not segfault), and causes other tests to fail, but it identifies where the problem is (to_zval_object_ex). I've confirmed that this also occurs in previous versions. Test script: --------------- Test script: http://soapbug.privatepaste.com/700d21fc7f WSDL: http://soapbug.privatepaste.com/4d7e882d61 XSD: http://soapbug.privatepaste.com/43f7a3e274 Expected result: ---------------- object(stdClass)#%d (2) { ["accountId"]=> int(1234) ["parent"]=> *RECURSION* } } Actual result: -------------- Segmentation fault ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=55323&edit=1