Bug #65927 [Opn]: _zend_mm_free_int caused access violation
Edit report at https://bugs.php.net/bug.php?id=65927&edit=1
ID: 65927
User updated by: it dot vie at virtual-identity dot com
Reported by: it dot vie at virtual-identity dot com
Summary: _zend_mm_free_int caused access violation
Status: Open
Type: Bug
Package: Reproducible crash
Operating System: Windows 2012
PHP Version: 5.4.21
Block user comment: N
Private report: N
New Comment:
Sorry! The debugging output is from the first test with 5.3.24, but we could reproduce this also in
the current build of php 5.4.21 for Windows.
Previous Comments:
------------------------------------------------------------------------
[2013-10-18 08:07:48] it dot vie at virtual-identity dot com
Description:
------------
We are using:
* Windows 2012
* httpd-2.4.4-win32
* mod_fcgid-2.3.7-win32
* php_sqlsrv_54_nts
* php 5.4.21
* drupal 7.x
The php-cgi.exe crashes on "high" load (20-50 r/sec) with an access violation. I created a
debugging output as shown on "bugs-generating-backtrace-win32".
IMHO the
#define ZEND_MM_IS_FREE_BLOCK(b) (!((b)->info._size & ZEND_MM_USED_BLOCK))
should check if b is a valid pointer or there should be more checks when using
ZEND_MM_IS_FREE_BLOCK, but I'm not a C pro :)
Can you help me with this issue?
Actual result:
--------------
php5!_zend_mm_free_int+57 [c:\php-sdk\php53dev\vc9\x86\php-5.3.24\zend\zend_alloc.c @ 2028]
c:\php-sdk\php53dev\vc9\x86\php-5.3.24\zend\zend_alloc.c @ 2028
php5!_efree+19 [c:\php-sdk\php53dev\vc9\x86\php-5.3.24\zend\zend_alloc.c @ 2361 + a]
c:\php-sdk\php53dev\vc9\x86\php-5.3.24\zend\zend_alloc.c @ 2361 + a
php_pdo_sqlsrv_53_nts+6833
...
...
...
sqlncli11!SNIPacketSetConnection+b4
sqlncli11!Session::ProcessDataPacket+1ef
sqlncli11!CCriticalSectionNT::Leave+d
0x018e5c58
ntdll!RtlpHeapFindListLookupEntry+40
ntdll!RtlpFindEntry+49
0x0673d4d0
ntdll!RtlpAllocateHeap+6e6
0x06720000
ntdll!RtlAllocateHeap+2de
php_pdo_sqlsrv_53_nts+12903
ntdll!RtlpAllocateHeap+76d
ntdll!RtlAllocateHeap+176
ntdll!RtlpHeapFindListLookupEntry+40
ntdll!RtlpFindEntry+49
ntdll!RtlpFreeHeap+667
0x067287c8
ntdll!RtlpFreeHeap+667
ntdll!RtlFreeHeap+206
sqlncli11!CImpISOSHost_MPMemObj::OperatorDelete+1c
sqlncli11!BATCHCTX::Release+a1
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=65927&edit=1
Thread (5 messages)