#18883 [NEW]: Crush when generating large XML documents using dom_xml under Apache

From: Date: Tue, 13 Aug 2002 14:11:06 +0000
Subject: #18883 [NEW]: Crush when generating large XML documents using dom_xml under Apache
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-16614@lists.php.net to get a copy of this message 
From:             ed@avi.ru
Operating system: Windows 98
PHP version:      4.2.2
PHP Bug Type:     Reproducible crash
Bug description:  Crush when generating large XML documents using dom_xml under Apache


The problem occurs when running the following code:

<?PHP

	$doc = domxml_new_doc ('1.0');

	$root = $doc->append_child ($doc->create_element ('root'));

	for ($i = 0; $i < 10; $i++) {
		$node = $root->append_child ($doc->create_element ('top_node_' . $i));
		for ($j = 0; $j < 10; $j++) {
			$child = $node->append_child ($doc->create_element (sprintf
('node_%s_%s', $i, $j)));
			for ($k = 0; $k < 10; $k++)
				$child->set_attribute (sprintf ('attribute_%s', $k), $i . "_" . $j .
"_" . $k);
		}
	}

	print ($doc->dump_mem ());

?>

Apache 1.3.24 crushes with the following message (translated from
Russian):

Program APACHE did crush when accessing memory page in module PHP4TS.DLL
in adress 015f:1009c557.
Registers:
EAX=0529a2a0 CS=015f EIP=1009c557 EFLGS=00010206
EBX=007b82e0 SS=0167 ESP=01a3f998 EBP=01a3fac4
ECX=01a3f9a8 DS=0167 ESI=01a3f9a8 FS=6e0f
EDX=01a3f9f4 ES=0167 EDI=007b82e0 GS=6ff6
Bytes on address CS:EIP:
66 ff 48 0a 8b 06 66 8b 48 0a 66 85 c9 75 30 50 
Stack content:
007e9050 012b1b0a 01a3f9a8 012b1b7f 0529a2a0 007e9810 012b1b50 007e97b0
007e98d0 012b1b32 007e9810 007e9970 012b1b32 007e98d0 007e99f0 012b1ac4 

The same problem had occured on earlier versions of Apache/PHP, and had
been tested on several machines.

If you try to decrement the number of 'for' cycles, the script will
generate correct output. On FreeBSD system this script works correctly.

-- 
Edit bug report at http://bugs.php.net/?id=18883&edit=1
-- 
Fixed in CVS:        http://bugs.php.net/fix.php?id=18883&r=fixedcvs
Fixed in release:    http://bugs.php.net/fix.php?id=18883&r=alreadyfixed
Need backtrace:      http://bugs.php.net/fix.php?id=18883&r=needtrace
Try newer version:   http://bugs.php.net/fix.php?id=18883&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=18883&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=18883&r=notwrong
Not enough info:     http://bugs.php.net/fix.php?id=18883&r=notenoughinfo
Submitted twice:     http://bugs.php.net/fix.php?id=18883&r=submittedtwice
register_globals:    http://bugs.php.net/fix.php?id=18883&r=globals

Thread (3 messages)

« previous php.bugs (#16614) next »