Bug #64287 [Opn]: sendmsg/recvmsg shutdown handler causes segfault
| From: | bobwei9 at hotmail dot com | Date: | Sat, 23 Feb 2013 20:22:09 +0000 |
| Subject: | Bug #64287 [Opn]: sendmsg/recvmsg shutdown handler causes segfault | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-177361@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=64287&edit=1
ID: 64287
User updated by: bobwei9 at hotmail dot com
Reported by: bobwei9 at hotmail dot com
Summary: sendmsg/recvmsg shutdown handler causes segfault
Status: Open
Type: Bug
Package: Reproducible crash
Operating System: Mac OS X Mountain Lion
PHP Version: master-Git-2013-02-23 (Git)
Block user comment: N
Private report: N
New Comment:
If I comment the line 448 (the call to tsrm_mutex_free()) out, it doesn't leak nor it segfaults
anymore...
Previous Comments:
------------------------------------------------------------------------
[2013-02-23 17:37:14] bobwei9 at hotmail dot com
Description:
------------
Somehow the sendrecvmsg shutdown handler crashes when freeing. See also the backtrace. (I don't
even do a single call to these functions)
But it only crashes on apache (not on cli).
It doesn't crash every time, but every two or three requests with every time the same
backtrace.
Test script:
---------------
I am unable to provide a test script as it happens on every sort of scripts since updating to a
version which includes sendmsg/recvmsg support.
Actual result:
--------------
#0 0x00007fff9868dd46 in __kill ()
#1 0x00007fff99ac5df0 in abort ()
#2 0x00007fff99a99959 in free ()
#3 0x0000000107d78b2f in tsrm_mutex_free (mutexp=0x7fc5498ab670) at TSRM.c:632
#4 0x0000000107b3fcfe in php_socket_sendrecvmsg_shutdown (type=1, module_number=45,
tsrm_ls=0x7fc548c33130) at sendrecvmsg.c:448
#5 0x0000000107b361a8 in zm_deactivate_sockets (type=1, module_number=45, tsrm_ls=0x7fc548c33130)
at sockets.c:750
#6 0x0000000107e685ba in zend_deactivate_modules (tsrm_ls=0x7fc548c33130) at zend_API.c:2364
#7 0x0000000107d818bd in php_request_shutdown (dummy=0x0) at main.c:1769
#8 0x0000000108034322 in php_apache_request_dtor (r=0x7fc5494216a0, tsrm_ls=0x7fc548c33130) at
sapi_apache2.c:507
#9 0x0000000108032dd1 in php_handler (r=0x7fc5494216a0) at sapi_apache2.c:679
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=64287&edit=1