Bug #66105 [NEW]: Segfault using GD

From: potecheck at live dot jp Operating system: Ubuntu 12.04.3 LTS PHP version: 5.5.6 Package: GD related Bug Type: Bug Bug description:Segfault using GD Description: ------------ Sometimes I get a segmentation fault using GD. This is Backtraces. gdb /usr/local/apache2/bin/httpd /var/tmp/core GNU gdb (Ubuntu/Linaro 7.4-2012.04-0ubuntu2.1) 7.4-2012.04 Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://bugs.launchpad.net/gdb-linaro/>... Reading symbols from /usr/local/apache2/bin/httpd...done. [New LWP 15654] warning: Can't read pathname for load map: Input/output error. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/usr/local/apache2/bin/httpd -k start'. Program terminated with signal 11, Segmentation fault. #0 0x00007fdadf6e351e in i_create_execute_data_from_op_array (nested=0 '\000', op_array=0x7fdae252b0c0) at /usr/local/src/make/php-5.5.6/Zend/zend_execute.c:1632 1632 EX(prev_execute_data) = EG(current_execute_data); (gdb) bt #0 0x00007fdadf6e351e in i_create_execute_data_from_op_array (nested=0 '\000', op_array=0x7fdae252b0c0) at /usr/local/src/make/php-5.5.6/Zend/zend_execute.c:1632 #1 zend_execute (op_array=0x7fdae252b0c0) at /usr/local/src/make/php-5.5.6/Zend/zend_vm_execute.h:388 #2 zend_execute (op_array=0x7fdae252b0c0) at /usr/local/src/make/php-5.5.6/Zend/zend_vm_execute.h:383 #3 0x00007fdadf63b1b3 in zend_execute_scripts (type=2, retval=0x0, file_count=1) at /usr/local/src/make/php-5.5.6/Zend/zend.c:1320 #4 0x00007fdadf6e6d5e in php_handler (r=0x228db50) at /usr/local/src/make/php-5.5.6/sapi/apache2handler/sapi_apache2.c:669 #5 0x0000000000448f58 in ap_run_handler (r=0x228db50) at config.c:169 #6 0x00000000004493ae in ap_invoke_handler (r=0x228db50) at config.c:432 #7 0x0000000000460df2 in ap_process_async_request (r=0x228db50) at http_request.c:317 #8 0x0000000000460f4f in ap_process_request (r=0x228db50) at http_request.c:363 #9 0x000000000045d6c5 in ap_process_http_sync_connection (c=0x22745e0) at http_core.c:190 #10 ap_process_http_connection (c=0x22745e0) at http_core.c:231 #11 0x0000000000452088 in ap_run_process_connection (c=0x22745e0) at connection.c:41 #12 0x000000000046f8c8 in child_main (child_num_arg=<optimized out>) at prefork.c:704 #13 0x000000000046fad7 in make_child (s=0x1fff1d0, slot=5) at prefork.c:800 #14 0x0000000000470892 in perform_idle_server_maintenance (p=<optimized out>) at prefork.c:902 #15 prefork_run (_pconf=<optimized out>, plog=<optimized out>, s=<optimized out>) at prefork.c:1090 #16 0x000000000042f346 in ap_run_mpm (pconf=0x1fd4138, plog=0x20035b8, s=0x1fff1d0) at mpm_common.c:98 #17 0x0000000000428c13 in main (argc=3, argv=0x7fffb29e8188) at main.c:777 Test script: --------------- <? // $url is image URL $f = fopen( $url, 'rb', false ); $im = imagecreatefromstring(stream_get_contents($f)); header( 'Cache-Control: public, max-age=604800' ); header( 'Content-Type: image/jpeg' ); imagejpeg($im); imagedestroy($im); -- Edit bug report at https://bugs.php.net/bug.php?id=66105&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=66105&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=66105&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=66105&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=66105&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=66105&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=66105&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=66105&r=needscript Try newer version: https://bugs.php.net/fix.php?id=66105&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=66105&r=support Expected behavior: https://bugs.php.net/fix.php?id=66105&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=66105&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=66105&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=66105&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=66105&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=66105&r=dst IIS Stability: https://bugs.php.net/fix.php?id=66105&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=66105&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=66105&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=66105&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=66105&r=mysqlcfg