Bug #67150 [NEW]: Segfault in zend_call_function

From: nefthy-php at nefthy dot de Operating system: Gentoo/Linux PHP version: 5.5.11 Package: Reproducible crash Bug Type: Bug Bug description:Segfault in zend_call_function Description: ------------ The apache PHP module segfault while procesing a POST request on a symfony2 project. # php -v PHP 5.5.11-pl0-gentoo (cli) (built: Apr 10 2014 15:04:45) Copyright (c) 1997-2014 The PHP Group Zend Engine v2.5.0, Copyright (c) 1998-2014 Zend Technologies with Zend OPcache v7.0.4-dev, Copyright (c) 1999-2014, by Zend Technologies with Xdebug v2.2.3, Copyright (c) 2002-2013, by Derick Rethans Test script: --------------- I cannot isolate the php code that is causing the crash. Expected result: ---------------- should not crash Actual result: -------------- Backtrace: Core was generated by `/usr/sbin/apache2 -D CGI -D PHP5 -D DEFAULT_VHOST -d /usr/lib64/apache2 -f /etc'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007effd8801d09 in zend_call_function (fci=fci@entry=0x1a905b8, fci_cache=fci_cache@entry=0x1a90600) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_execute_API.c:812 warning: Source file is more recent than executable. 812 (!EG(objects_store).object_buckets || !EG(objects_store).object_buckets[Z_OBJ_HANDLE_P(fci->object_ptr)].valid)) { (gdb) bt #0 0x00007effd8801d09 in zend_call_function (fci=fci@entry=0x1a905b8, fci_cache=fci_cache@entry=0x1a90600) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_execute_API.c:812 #1 0x00007effd881c817 in zend_fcall_info_call (fci=0x1a905b8, fcc=0x1a90600, retval_ptr_ptr=retval_ptr_ptr@entry=0x7fffd624fa60, args=args@entry=0x0) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_API.c:3386 #2 0x00007effd87c25da in php_output_handler_op (context=0x7fffd624faa0, handler=0x1bfe3a8) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/main/output.c:962 #3 php_output_stack_pop (flags=16) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/main/output.c:1229 #4 php_output_discard () at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/main/output.c:344 #5 0x00007effd87c2bbc in zif_ob_get_clean (ht=<optimized out>, return_value=0x1bc8f38, return_value_ptr=<optimized out>, this_ptr=<optimized out>, return_value_used=<optimized out>) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/main/output.c:1438 #6 0x00007effd1f98325 in xdebug_execute_internal (current_execute_data=0x7effdf3f55b8, fci=0x0, return_value_used=1) at /var/tmp/portage/dev-php/xdebug-2.2.3/work/php5.5/xdebug.c:1553 #7 0x00007effd88d77dc in zend_do_fcall_common_helper_SPEC (execute_data=<optimized out>) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:552 #8 0x00007effd883e6f8 in execute_ex (execute_data=0x7effdf3f55b8) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:363 #9 0x00007effd1f987d6 in xdebug_execute_ex (execute_data=0x7effdf3f55b8) at /var/tmp/portage/dev-php/xdebug-2.2.3/work/php5.5/xdebug.c:1437 #10 0x00007effd88d7e85 in zend_do_fcall_common_helper_SPEC (execute_data=0x7effdf3f5490) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:584 #11 0x00007effd883e6f8 in execute_ex (execute_data=0x7effdf3f5490) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:363 #12 0x00007effd1f987d6 in xdebug_execute_ex (execute_data=0x7effdf3f5490) at /var/tmp/portage/dev-php/xdebug-2.2.3/work/php5.5/xdebug.c:1437 #13 0x00007effd88d7e85 in zend_do_fcall_common_helper_SPEC (execute_data=0x7effdf3f5320) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:584 #14 0x00007effd883e6f8 in execute_ex (execute_data=0x7effdf3f5320) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:363 #15 0x00007effd1f987d6 in xdebug_execute_ex (execute_data=0x7effdf3f5320) at /var/tmp/portage/dev-php/xdebug-2.2.3/work/php5.5/xdebug.c:1437 #16 0x00007effd88d7e85 in zend_do_fcall_common_helper_SPEC (execute_data=0x7effdf3f51f0) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:584 #17 0x00007effd883e6f8 in execute_ex (execute_data=0x7effdf3f51f0) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:363 #18 0x00007effd1f987d6 in xdebug_execute_ex (execute_data=0x7effdf3f51f0) at /var/tmp/portage/dev-php/xdebug-2.2.3/work/php5.5/xdebug.c:1437 #19 0x00007effd88d7e85 in zend_do_fcall_common_helper_SPEC (execute_data=0x7effdf3f50c0) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:584 #20 0x00007effd883e6f8 in execute_ex (execute_data=0x7effdf3f50c0) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend_vm_execute.h:363 #21 0x00007effd1f987d6 in xdebug_execute_ex (execute_data=0x7effdf3f50c0) at /var/tmp/portage/dev-php/xdebug-2.2.3/work/php5.5/xdebug.c:1437 #22 0x00007effd881221f in zend_execute_scripts (type=type@entry=8, retval=retval@entry=0x0, file_count=file_count@entry=3) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/Zend/zend.c:1316 #23 0x00007effd87aca27 in php_execute_script (primary_file=primary_file@entry=0x7fffd6252be0) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/main/main.c:2506 #24 0x00007effd88d95c2 in php_handler (r=0x14675d0) at /var/tmp/portage/dev-lang/php-5.5.11/work/sapis-build/apache2/sapi/apache2handler/sapi_apache2.c:667 #25 0x000000000045169a in ap_run_handler (r=0x14675d0) at config.c:169 #26 ap_invoke_handler (r=r@entry=0x14675d0) at config.c:439 #27 0x000000000046864a in ap_process_async_request (r=r@entry=0x14675d0) at http_request.c:317 #28 0x0000000000468914 in ap_process_request (r=r@entry=0x14675d0) at http_request.c:363 #29 0x000000000046439b in ap_process_http_sync_connection (c=0x14614c0) at http_core.c:190 #30 ap_process_http_connection (c=0x14614c0) at http_core.c:231 #31 0x000000000045bf08 in ap_run_process_connection (c=0x14614c0) at connection.c:41 #32 ap_process_connection (c=c@entry=0x14614c0, csd=<optimized out>) at connection.c:202 #33 0x00000000004702a5 in child_main (child_num_arg=child_num_arg@entry=0) at prefork.c:704 #34 0x00000000004714d4 in make_child (slot=0, s=0xfff538) at prefork.c:800 #35 startup_children (number_to_start=5) at prefork.c:818 #36 prefork_run (_pconf=<optimized out>, plog=0x1003378, s=0xfff538) at prefork.c:976 #37 0x000000000043150e in ap_run_mpm (pconf=0xfd6138, plog=0x1003378, s=0xfff538) at mpm_common.c:96 #38 0x00000000004295f5 in main (argc=13, argv=0x7fffd62533e8) at main.c:777 -- Edit bug report at https://bugs.php.net/bug.php?id=67150&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=67150&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=67150&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=67150&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=67150&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=67150&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=67150&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=67150&r=needscript Try newer version: https://bugs.php.net/fix.php?id=67150&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=67150&r=support Expected behavior: https://bugs.php.net/fix.php?id=67150&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=67150&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=67150&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=67150&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=67150&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=67150&r=dst IIS Stability: https://bugs.php.net/fix.php?id=67150&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=67150&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=67150&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=67150&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=67150&r=mysqlcfg