Bug #65372 [NEW]: Segfault in gc_zval_possible_root

From: sreed at ontraport dot com Operating system: Fedora PHP version: 5.4Git-2013-08-01 (Git) Package: Reproducible crash Bug Type: Bug Bug description:Segfault in gc_zval_possible_root Description: ------------ PHP is segfaulting during shutdown in gc_zval_possible_root. This bug appears to have appeared in version 5.4: http://3v4l.org/qLqe3. Test script: --------------- https://gist.github.com/sreed-ontraport/6134324 Expected result: ---------------- Script executes and PHP exits cleanly Actual result: -------------- 0x00000000006a0032 in gc_zval_possible_root (zv=0x7ffff7fc5108) at /tmp/php5.4- 201308011830/Zend/zend_gc.c:143 143 GC_ZOBJ_CHECK_POSSIBLE_ROOT(zv); (gdb) bt #0 0x00000000006a0032 in gc_zval_possible_root (zv=0x7ffff7fc5108) at /tmp/php5.4-201308011830/Zend/zend_gc.c:143 #1 0x00000000006a1c47 in zend_object_std_dtor (object=0x7ffff7fc8970) at /tmp/php5.4-201308011830/Zend/zend_objects.c:54 #2 0x00000000006a1c79 in zend_objects_free_object_storage (object=0x7ffff7fc8970) at /tmp/php5.4-201308011830/Zend/zend_objects.c:137 #3 0x00000000006a74c8 in zend_objects_store_free_object_storage (objects=0xd8a0a0 <executor_globals+960>) at /tmp/php5.4- 201308011830/Zend/zend_objects_API.c:92 #4 0x000000000067396b in shutdown_executor () at /tmp/php5.4- 201308011830/Zend/zend_execute_API.c:295 #5 0x0000000000681aa6 in zend_deactivate () at /tmp/php5.4- 201308011830/Zend/zend.c:938 #6 0x000000000062417d in php_request_shutdown (dummy=dummy@entry=0x0) at /tmp/php5.4-201308011830/main/main.c:1803 #7 0x0000000000726094 in do_cli (argc=2, argv=0x7fffffffe148) at /tmp/php5.4- 201308011830/sapi/cli/php_cli.c:1172 #8 0x00000000004255ca in main (argc=2, argv=0x7fffffffe148) at /tmp/php5.4- 201308011830/sapi/cli/php_cli.c:1365 -- Edit bug report at https://bugs.php.net/bug.php?id=65372&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=65372&r=trysnapshot54 Try a snapshot (PHP 5.3): https://bugs.php.net/fix.php?id=65372&r=trysnapshot53 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=65372&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=65372&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=65372&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=65372&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=65372&r=needscript Try newer version: https://bugs.php.net/fix.php?id=65372&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=65372&r=support Expected behavior: https://bugs.php.net/fix.php?id=65372&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=65372&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=65372&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=65372&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=65372&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=65372&r=dst IIS Stability: https://bugs.php.net/fix.php?id=65372&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=65372&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=65372&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=65372&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=65372&r=mysqlcfg