Bug #62525 [Com]: sigabrt while converting floating point to string

Edit report at https://bugs.php.net/bug.php?id=62525&edit=1 ID: 62525 Comment by: ab@php.net Reported by: perryjp at gmail dot com Summary: sigabrt while converting floating point to string Status: Open Type: Bug Package: Reproducible crash Operating System: Ubuntu 10.04.3 LTS PHP Version: master-Git-2012-07-10 (Git) Block user comment: N Private report: N New Comment: But your trace says snprintf.c:399. Could you give a piece of code causing this? Previous Comments: ------------------------------------------------------------------------ [2012-07-10 17:06:00] perryjp at gmail dot com Description: ------------ I traced the root of my problem to compilation issues but I while debugging my issues I traced a sigabrt to a bug in snprintf.c freeing a static string. php_conv_fp(snprintf.c:396) tries to free the static strings "NAN" or "INF" returned from __cvt(snprintf.c:97) Actual result: -------------- #0 0x0f8fc0d0 in raise () from /lib/tls/libc.so.6 #1 0x0f8fd924 in abort () from /lib/tls/libc.so.6 #2 0x0f93f658 in __libc_message () from /lib/tls/libc.so.6 #3 0x0f945f70 in malloc_printerr () from /lib/tls/libc.so.6 #4 0x0f947330 in _int_free () from /lib/tls/libc.so.6 #5 0x0f9478c0 in free () from /lib/tls/libc.so.6 #6 0x102bb960 in php_conv_fp (format=70 'F', num=2.0824708938098908, add_dp=NO, precision=8, dec_point=46 '.', is_negative=0xbfb8d040, buf=0xbfb8ce3d "NAN", len=0xbfb8ce38) at /php/main/snprintf.c:399 #7 0x102bffdc in xbuf_format_converter (xbuf=0xbfb8d138, fmt=0x104463b7 "F", ap=0xbfb8d16c) at /php/main/spprintf.c:588 #8 0x102c0d14 in vspprintf (pbuf=0xbfb8d29c, max_len=0, format=0x104463a8 "%.15s%ld%ld%0.8F", ap=0xbfb8d16c) at /php/main/spprintf.c:769 #9 0x102c0df0 in spprintf (pbuf=0xbfb8d29c, max_len=0, format=0x104463a8 "%.15s%ld%ld%0.8F") at /php/main/spprintf.c:788 #10 0x1017a59c in php_session_create_id (mod_data=0x104b3f08, newlen=0x0) at /php/ext/session/session.c:736 #11 0x1017aa2c in php_session_initialize () at /php/ext/session/session.c:830 #12 0x1017d530 in php_session_start () at /php/ext/session/session.c:1325 #13 0x1017fe48 in zif_session_start (ht=0, return_value=0x105695c0, return_value_ptr=0x0, this_ptr=0x0, return_value_used=0) at /php/ext/session/session.c:1815 #14 0x103539d4 in zend_do_fcall_common_helper_SPEC (execute_data=0xbfb8dff8) at /php/Zend/zend_vm_execute.h:200 #15 0x1035b428 in ZEND_DO_FCALL_SPEC_CONST_HANDLER (execute_data=0xbfb8dff8) at /php/Zend/zend_vm_execute.h:1679 #16 0x1035334c in execute (op_array=0x10596f88) at /php/Zend/zend_vm_execute.h:92 #17 0x10353ba4 in zend_do_fcall_common_helper_SPEC (execute_data=0xbfb8e148) at /php/Zend/zend_vm_execute.h:234 #18 0x1035b428 in ZEND_DO_FCALL_SPEC_CONST_HANDLER (execute_data=0xbfb8e148) at /php/Zend/zend_vm_execute.h:1679 #19 0x1035334c in execute (op_array=0x10560418) at /php/Zend/zend_vm_execute.h:92 #20 0x10365278 in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER ( execute_data=0xbfb8f2e8) at /php/Zend/zend_vm_execute.h:4612 #21 0x1035334c in execute (op_array=0x1055d000) at /php/Zend/zend_vm_execute.h:92 #22 0x10322798 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /php/Zend/zend.c:1134 #23 0x102ba7c0 in php_execute_script (primary_file=0xbfb9175c) at /php/main/main.c:2005 #24 0x103cb7dc in main (argc=3, argv=0xbfb93d24) at /php/sapi/cgi/cgi_main.c:1919 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=62525&edit=1