Bug #61895 [Opn]: PHP core crash when call $pdoStmt->execute($array_params) with PDO_Firebird

From:	andrey at tranvi dot info	Date:	Wed, 02 May 2012 06:13:41 +0000
Subject:	Bug #61895 [Opn]: PHP core crash when call $pdoStmt->execute($array_params) with PDO_Firebird
References:	1	Groups:	php.bugs
Request:	Send a blank email to php-bugs+get-170069@lists.php.net to get a copy of this message

Edit report at https://bugs.php.net/bug.php?id=61895&edit=1

 ID:                 61895
 User updated by:    andrey at tranvi dot info
 Reported by:        andrey at tranvi dot info
 Summary:            PHP core crash when call
                     $pdoStmt->execute($array_params) with PDO_Firebird
 Status:             Open
 Type:               Bug
 Package:            PDO related
 Operating System:   Windows
 PHP Version:        5.3.11
 Block user comment: N
 Private report:     N

 New Comment:

Backtrace:

 	php5ts_debug.dll!zend_error(int type=2, const char * format=0x10592b4c, ...) 
Строка 979	C
>	php5ts_debug.dll!_zval_dtor_func(_zval_struct * zvalue=0x026e4408, char *
>__zend_filename=0x10587080, unsigned int __zend_lineno=447)  Строка 35 + 0x2d
>байт	C
 	php5ts_debug.dll!_zval_dtor(_zval_struct * zvalue=0x026e4408, char * __zend_filename=0x10587080,
unsigned int __zend_lineno=447)  Строка 35 + 0x11 байт	C
 	php5ts_debug.dll!_zval_ptr_dtor(_zval_struct * * zval_ptr=0x026e6660, char *
__zend_filename=0x1064d5dc, unsigned int __zend_lineno=293)  Строка 447 + 0x17
байт	C
 	php5ts_debug.dll!param_dtor(void * data=0x026e6650)  Строка 293 + 0x1a
байт	C
 	php5ts_debug.dll!zend_hash_destroy(_hashtable * ht=0x026e4bc8)  Строка 529 +
0x11 байт	C
 	php5ts_debug.dll!zim_PDOStatement_execute(int ht=1, _zval_struct * return_value=0x026e2f60,
_zval_struct * * return_value_ptr=0x00000000, _zval_struct * this_ptr=0x026e2b20, int
return_value_used=0, void * * * tsrm_ls=0x02993f98)  Строка 453 + 0xc
байт	C
 	php5ts_debug.dll!zend_do_fcall_common_helper_SPEC(_zend_execute_data * execute_data=0x026806e8,
void * * * tsrm_ls=0x02993f98)  Строка 320 + 0x78 байт	C
 	php5ts_debug.dll!ZEND_DO_FCALL_BY_NAME_SPEC_HANDLER(_zend_execute_data * execute_data=0x026806e8,
void * * * tsrm_ls=0x02993f98)  Строка 426	C
 	php5ts_debug.dll!execute(_zend_op_array * op_array=0x02e038f0, void * * * tsrm_ls=0x02993f98) 
Строка 107 + 0x11 байт	C
 	php5ts_debug.dll!zend_execute_scripts(int type=8, void * * * tsrm_ls=0x02993f98, _zval_struct * *
retval=0x00000000, int file_count=3, ...)  Строка 1236 + 0x21 байт	C
 	php5ts_debug.dll!php_execute_script(_zend_file_handle * primary_file=0x00c1fed8, void * * *
tsrm_ls=0x02993f98)  Строка 2308 + 0x1b байт	C
 	php.exe!main(int argc=4, char * * argv=0x02993e30)  Строка 1184 + 0x13
байт	C
 	php.exe!__tmainCRTStartup()  Строка 586 + 0x19 байт	C
 	php.exe!mainCRTStartup()  Строка 403	C
 	kernel32.dll!763fed6c() 	
 	[Указанные ниже фреймы
могут быть неверны и (или)
отсутствовать, символы для
kernel32.dll не загружены]	
 	ntdll.dll!778237f5() 	
 	ntdll.dll!778237c8()


Previous Comments:
------------------------------------------------------------------------
[2012-05-02 05:32:13] andrey at tranvi dot info

Description:
------------
Here: http://pastebin.com/SPgP5xQX php code, minified for
crashing.
Here: http://pastebin.com/MYZj9cPB sql code for creating
database for test.

First, I try create prepared query:

$q=$db->prepare($sql);

when, in loop, I call $q->execute() with some params.

So, when I call execute() without any params - all ok. With 1 or 2 simple parameters - all ok too.
When parameters is array of 11 elements, PHP core crash.

Under debug version, it's write this log:

[Wed May 02 10:11:46 2012] [error] [client 127.0.0.1] PHP Warning:  String is not zero-terminated
(String is not zero-terminated
(ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
ZZZZZZZZE\xc2'\x1eZZ)\xf0\x15d\x10\xc4\x01) (source:
c:\\php-sdk\\php53dev\\vc9\\x86\\zend\\zend_execute_api.c:447) in
D:\\test\\yii\\testing\\test_niokr.php on line 107, referer: http://localhost/testing/


I tested it under php5.3.10, php5.3.11 (binary download from official site)
and sself build 5.3.11 with VC9,thread safe, debug version

Release version simple crash. Debug version write many warnings, and crash too.


Test script:
---------------
Here: http://pastebin.com/SPgP5xQX php code, minified for
crashing.
Here: http://pastebin.com/MYZj9cPB sql code



------------------------------------------------------------------------



-- 
Edit this bug report at https://bugs.php.net/bug.php?id=61895&edit=1


   

Thread (4 messages)

• andrey at tranvi dot infoWed, 02 May 2012 05:32:13 +0000
  • andrey at tranvi dot infoWed, 02 May 2012 06:13:41 +0000Bug #61895 [Opn]: PHP core crash when call $pdoStmt->execute($array_params) with PDO_Firebird
  • andrey at tranvi dot infoWed, 02 May 2012 06:26:04 +0000Bug #61895 [Opn]: PHP core crash when call $pdoStmt->execute($array_params) with PDO_Firebird
  • ab@php.netMon, 07 Nov 2016 16:35:12 +0000Bug #61895 [Asn->Csd]: PHP core crash when call $pdoStmt->execute($array_params) with PDO_Firebird