Bug #55753 [Com]: Sporadic crashes

Edit report at https://bugs.php.net/bug.php?id=55753&edit=1 ID: 55753 Comment by: dado at burza dot hr Reported by: dado at burza dot hr Summary: Sporadic crashes Status: Feedback Type: Bug Package: Reproducible crash Operating System: Fedora 14 i686 PHP Version: 5.3.8 Block user comment: N Private report: N New Comment: OK, I am not able to make the vanilla version crash, but just now checked and the production server is running manually compiled 5.2 version which also crashes here (don't know if for same reason, assuming yes). I've taken their ./configure, but as it uses other, also manually compiled stuff, it doesn't match my environment (and thus, also doesn't crash). Are you able (by looking at the bt) to slightly reduce where this could be? I can provide additional info and try/test stuff to see if it breaks. Also, as said earlier, my co-worker got a crash on the exact same place, running Ubuntu. When he gets back, I'll attach his BT here too. Previous Comments: ------------------------------------------------------------------------ [2011-09-21 09:24:28] dado at burza dot hr Yeah, I need it to go through Apache to be able to access the URL which it crashes on, seeing I don't have a simple script to run on a locally installed executable. I'm compiling vanilla as typing this, but have yet to figure out how to get the exact ./configure from the RPM (different options might make it not crash at all). The issue is that this is crashing on the exact same place on Fedora, CentOS and Ubuntu (my co-worker tried) so my guess is that it isn't distro-specific). Will get back to you, tnx. ------------------------------------------------------------------------ [2011-09-21 09:19:33] pajoye@php.net not really, best would be to be using our src directly. You don't have to install PHP, it can be done using a local install in your home. If you can't do it, I would suggest to report the problem to fedora directly but without some kind of reproduce steps, there is little chance to get a fix. ------------------------------------------------------------------------ [2011-09-21 09:10:14] dado at burza dot hr If I recompile the RPM having disabled all the patches, does that count? ------------------------------------------------------------------------ [2011-09-21 09:02:54] pajoye@php.net Please try using a plain vanilla php (from php.net) ------------------------------------------------------------------------ [2011-09-21 08:58:44] dado at burza dot hr Description: ------------ Using PHP 5.3.8-1.fc14 and 2.2.17-1.fc14 and having crashes on random URLs (cannot isolate the problem), but repeatable. Also having this issue (same URLs) on my live deployment of the app which runs PHP 5.2. Test script: --------------- Could not isolate the problem Expected result: ---------------- No crash Actual result: -------------- Core was generated by `/usr/sbin/httpd'. Program terminated with signal 11, Segmentation fault. #0 _zend_mm_free_int (heap=0x2463e70, p=0x25c5fa8) at /usr/src/debug/php-5.3.8/Zend/zend_alloc.c:2028 2028 if (ZEND_MM_IS_FREE_BLOCK(next_block)) { (gdb) thread apply all bt full Thread 1 (Thread 0xb78b6750 (LWP 19172)): #0 _zend_mm_free_int (heap=0x2463e70, p=0x25c5fa8) at /usr/src/debug/php-5.3.8/Zend/zend_alloc.c:2028 mm_block = 0x25c5fa0 next_block = 0x4b8bf54 size = <value optimized out> #1 0x011bfbee in _zval_ptr_dtor (zval_ptr=0x2716ef4) at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:448 zv = 0x25c5fa8 #2 0x011dc69f in zend_hash_destroy (ht=0x2716d04) at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529 p = 0x2715114 q = 0x2716ee8 #3 0x011cdf0e in _zval_dtor_func (zvalue=0x26a4324) at /usr/src/debug/php-5.3.8/Zend/zend_variables.c:43 No locals. #4 0x011bfbe6 in _zval_dtor (zval_ptr=0x2714f98) at /usr/src/debug/php-5.3.8/Zend/zend_variables.h:35 No locals. #5 _zval_ptr_dtor (zval_ptr=0x2714f98) at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:447 zv = 0x26a4324 ---Type <return> to continue, or q <return> to quit--- #6 0x011dc69f in zend_hash_destroy (ht=0x2716d5c) at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529 p = 0x2714e00 q = 0x2714f8c #7 0x011ef604 in zend_object_std_dtor (object=0x2717484) at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:45 No locals. #8 0x011ef643 in zend_objects_free_object_storage (object=0x2717484) at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:126 No locals. #9 0x011f38ec in zend_objects_store_del_ref_by_handle_ex (handle=150, handlers=0x132c720) at /usr/src/debug/php-5.3.8/Zend/zend_objects_API.c:220 __orig_bailout = 0xbf8b3e84 __bailout = {{__jmpbuf = {20090920, -1217180600, 40529048, -1081394024, 261255254, 664128811}, __mask_was_saved = 0, __saved_mask = {__val = {40243584, 38157936, 3213573208, 18537958, 81, 20104992, 39485736, 40218660, 40218660, 38157936, 3213573240, 18537958, 40471396, 3213573356, 41235216, 20090920, 40243648, 40471144, 52, 40218660, 40243648, 39244612, 40585716, 40470432, 40470432, 38157936, 3213573304, 18537958, 40218668, 261976150, 39859780, 40530788}}}} obj = 0x256db04 failure = <value optimized out> ---Type <return> to continue, or q <return> to quit--- #10 0x011f3930 in zend_objects_store_del_ref (zobject=0x27172b0) at /usr/src/debug/php-5.3.8/Zend/zend_objects_API.c:172 handle = <value optimized out> #11 0x011cdee1 in _zval_dtor_func (zvalue=0x27172b0) at /usr/src/debug/php-5.3.8/Zend/zend_variables.c:52 No locals. #12 0x011bfbe6 in _zval_dtor (zval_ptr=0x271aba0) at /usr/src/debug/php-5.3.8/Zend/zend_variables.h:35 No locals. #13 _zval_ptr_dtor (zval_ptr=0x271aba0) at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:447 zv = 0x27172b0 #14 0x011dc69f in zend_hash_destroy (ht=0x26a6c98) at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529 p = 0x2741e44 q = 0x271ab94 #15 0x011cdf0e in _zval_dtor_func (zvalue=0x26a70b4) at /usr/src/debug/php-5.3.8/Zend/zend_variables.c:43 No locals. #16 0x011bfbe6 in _zval_dtor (zval_ptr=0x265846c) at /usr/src/debug/php-5.3.8/Zend/zend_variables.h:35 No locals. #17 _zval_ptr_dtor (zval_ptr=0x265846c) ---Type <return> to continue, or q <return> to quit--- at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:447 zv = 0x26a70b4 #18 0x011dc69f in zend_hash_destroy (ht=0x26581a0) at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529 p = 0x2659e6c q = 0x2658460 #19 0x011ef604 in zend_object_std_dtor (object=0x26580c4) at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:45 No locals. #20 0x011ef643 in zend_objects_free_object_storage (object=0x26580c4) at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:126 No locals. #21 0x011f3416 in zend_objects_store_free_object_storage (objects=0x13447b0) at /usr/src/debug/php-5.3.8/Zend/zend_objects_API.c:92 obj = 0x256d224 i = <value optimized out> #22 0x011c02bc in shutdown_executor () at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:304 __orig_bailout = 0x0 __bailout = {{__jmpbuf = {20090920, 20202912, 18669792, -1081393352, 261697622, 568386347}, __mask_was_saved = 0, __saved_mask = { __val = {39274560, 38157936, 3213573864, 18537958, 21265977, 20090920, 3213573848, 17115236, 0, 0, 264, 39274560, 16900809, ---Type <return> to continue, or q <return> to quit--- 20090920, 3213573880, 20090920, 20203776, 20202788, 3213573912, 18668784, 39274568, 1947, 3213573944, 18729751, 38160152, 24, 18668715, 20090920, 20203776, 20201856, 3213573944, 18476203}}}} #23 0x011cef30 in zend_deactivate () at /usr/src/debug/php-5.3.8/Zend/zend.c:891 No locals. #24 0x01174e1d in php_request_shutdown (dummy=0x0) at /usr/src/debug/php-5.3.8/main/main.c:1640 report_memleaks = 1 '\001' #25 0x012635b4 in php_apache_request_dtor (r=0x25b8208) at /usr/src/debug/php-5.3.8/sapi/apache2handler/sapi_apache2.c:509 No locals. #26 php_handler (r=0x25b8208) at /usr/src/debug/php-5.3.8/sapi/apache2handler/sapi_apache2.c:681 ctx = 0x25b91c8 conf = 0x23cb550 brigade = 0x25b98d0 bucket = <value optimized out> rv = <value optimized out> parent_req = 0x0 #27 0x00950441 in ap_run_handler (r=0x25b8208) at /usr/src/debug/httpd-2.2.17/server/config.c:158 ---Type <return> to continue, or q <return> to quit--- pHook = <value optimized out> n = <value optimized out> rv = <value optimized out> #28 0x00950849 in ap_invoke_handler (r=0x25b8208) at /usr/src/debug/httpd-2.2.17/server/config.c:376 handler = <value optimized out> p = <value optimized out> result = <value optimized out> old_handler = 0x23ec418 "php5-script" ignore = <value optimized out> #29 0x0095f134 in ap_internal_redirect (new_uri=0x25b81f8 "/index.php", r=0x25b9f88) at /usr/src/debug/httpd-2.2.17/modules/http/http_request.c:549 new = 0x25b8208 access_status = <value optimized out> #30 0x005315b6 in handler_redirect (r=0x25b9f88) at /usr/src/debug/httpd-2.2.17/modules/mappers/mod_rewrite.c:4831 No locals. #31 0x00950441 in ap_run_handler (r=0x25b9f88) at /usr/src/debug/httpd-2.2.17/server/config.c:158 pHook = <value optimized out> n = <value optimized out> rv = <value optimized out> #32 0x00950849 in ap_invoke_handler (r=0x25b9f88) ---Type <return> to continue, or q <return> to quit--- at /usr/src/debug/httpd-2.2.17/server/config.c:376 handler = <value optimized out> p = <value optimized out> result = <value optimized out> old_handler = 0x538d4b "redirect-handler" ignore = <value optimized out> #33 0x0095fb28 in ap_process_request (r=0x25b9f88) at /usr/src/debug/httpd-2.2.17/modules/http/http_request.c:282 access_status = <value optimized out> #34 0x0095c738 in ap_process_http_connection (c=0x25ac0e8) at /usr/src/debug/httpd-2.2.17/modules/http/http_core.c:190 r = 0x25b9f88 csd = 0x0 #35 0x00957b81 in ap_run_process_connection (c=0x25ac0e8) at /usr/src/debug/httpd-2.2.17/server/connection.c:43 pHook = <value optimized out> n = <value optimized out> rv = <value optimized out> #36 0x00965041 in child_main (child_num_arg=<value optimized out>) at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:662 current_conn = <value optimized out> csd = 0x25abf50 ptrans = 0x25abf10 ---Type <return> to continue, or q <return> to quit--- allocator = 0x25a9e80 status = <value optimized out> i = <value optimized out> lr = <value optimized out> pollset = 0x25aa058 sbh = 0x25aa050 bucket_alloc = 0x25b5f38 last_poll_idx = 0 #37 0x009653ee in make_child (s=<value optimized out>, slot=1) at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:763 pid = <value optimized out> #38 0x009654cf in startup_children (number_to_start=7) at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:781 i = <value optimized out> #39 0x009660f5 in ap_mpm_run (_pconf=0x23560b8, plog=0x2384170, s=0x2357fb0) at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:1002 index = <value optimized out> remaining_children_to_start = 8 rv = <value optimized out> #40 0x00939952 in main (argc=1, argv=0xbf8b4894) at /usr/src/debug/httpd-2.2.17/server/main.c:739 c = 0 '\000' configtestonly = 9861636 ---Type <return> to continue, or q <return> to quit--- confname = 0x9681cc "conf/httpd.conf" def_server_root = 0x9681c1 "/etc/httpd" temp_error_log = 0x968413 "Pre-configuration failed" error = <value optimized out> process = 0x2354140 server_conf = 0x2357fb0 pglobal = 0x968447 pconf = 0x23560b8 plog = 0x2384170 ptemp = 0x2388180 pcommands = 0x23580c0 opt = 0x2358160 rv = 37060528 mod = <value optimized out> optarg = 0x96792a "\201\303\346@\001" signal_server = <value optimized out> ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=55753&edit=1