Bug #67489 [NEW]: PHP Crashes in zend_execute_scripts / zend_vm_execute

From: majo-bugs dot php dot net at pematon dot com Operating system: FreeBSD 9.2 PHP version: 5.4.29 Package: Reproducible crash Bug Type: Bug Bug description:PHP Crashes in zend_execute_scripts / zend_vm_execute Description: ------------ I get often crashes on FreeBSD 9.2 in zend_execute_scripts / execute (in zend_vm_execute.h). There are two variants of this crash. Expected result: ---------------- Not crash. Actual result: -------------- Variant 1: Core was generated by `httpd'. Program terminated with signal 11, Segmentation fault. #0 execute (op_array=0x807277ff8) at zend_vm_execute.h:363 363 zend_vm_execute.h: No such file or directory. in zend_vm_execute.h [New Thread 802407400 (LWP 102448/httpd)] #0 execute (op_array=0x807277ff8) at zend_vm_execute.h:363 #1 0x000000080588e737 in zend_execute_scripts (type=2, retval=0x0, file_count=1) at /tmp/portbuild/usr/ports/www/mod_php5/work/php-5.4.29/Zend/zend.c:1315 #2 0x0000000805937ee1 in php_handler (r=0x8071830a0) at /tmp/portbuild/usr/ports/www/mod_php5/work/php-5.4.29/sapi/apache2handler/sapi_apache2.c:669 #3 0x000000000044e91a in ap_run_handler (r=0x8071830a0) at config.c:169 #4 0x0000000000452682 in ap_invoke_handler (r=0x8071830a0) at config.c:439 #5 0x0000000000463f8e in ap_process_async_request (r=0x8071830a0) at http_request.c:317 #6 0x00000000004640cf in ap_process_request (r=0x8071830a0) at http_request.c:363 #7 0x0000000000460815 in ap_process_http_connection (c=0x807145290) at http_core.c:190 #8 0x0000000000458c22 in ap_run_process_connection (c=0x807145290) at connection.c:41 #9 0x000000000046a327 in child_main (child_num_arg=<value optimized out>) at prefork.c:704 #10 0x000000000046a5a4 in make_child (s=0x802453268, slot=11) at prefork.c:800 #11 0x000000000046af06 in prefork_run (_pconf=<value optimized out>, plog=<value optimized out>, s=<value optimized out>) at prefork.c:902 #12 0x00000000004360b2 in ap_run_mpm (pconf=0x802423028, plog=0x80244f028, s=0x802453268) at mpm_common.c:96 #13 0x000000000043021b in main (argc=2, argv=0x7fffffffdd18) at main.c:777 Variant 2 (longer trace, probably because now it is with mod_rewrite): Core was generated by `httpd'. Program terminated with signal 11, Segmentation fault. #0 execute (op_array=0x802639490) at zend_vm_execute.h:363 363 zend_vm_execute.h: No such file or directory. in zend_vm_execute.h [New Thread 802407400 (LWP 101517/httpd)] #0 execute (op_array=0x802639490) at zend_vm_execute.h:363 #1 0x000000080588e737 in zend_execute_scripts (type=2, retval=0x0, file_count=1) at /tmp/portbuild/usr/ports/www/mod_php5/work/php-5.4.29/Zend/zend.c:1315 #2 0x0000000805937ee1 in php_handler (r=0x807323970) at /tmp/portbuild/usr/ports/www/mod_php5/work/php-5.4.29/sapi/apache2handler/sapi_apache2.c:669 #3 0x000000000044e91a in ap_run_handler (r=0x807323970) at config.c:169 #4 0x0000000000452682 in ap_invoke_handler (r=0x807323970) at config.c:439 #5 0x0000000000463baa in ap_internal_redirect (new_uri=<value optimized out>, r=<value optimized out>) at http_request.c:644 #6 0x000000080546b640 in handler_redirect (r=0x8072fe0a0) at mod_rewrite.c:5105 #7 0x000000000044e91a in ap_run_handler (r=0x8072fe0a0) at config.c:169 #8 0x0000000000452682 in ap_invoke_handler (r=0x8072fe0a0) at config.c:439 #9 0x0000000000463f8e in ap_process_async_request (r=0x8072fe0a0) at http_request.c:317 #10 0x00000000004640cf in ap_process_request (r=0x8072fe0a0) at http_request.c:363 #11 0x0000000000460815 in ap_process_http_connection (c=0x8072ec290) at http_core.c:190 #12 0x0000000000458c22 in ap_run_process_connection (c=0x8072ec290) at connection.c:41 #13 0x000000000046a327 in child_main (child_num_arg=<value optimized out>) at prefork.c:704 #14 0x000000000046a5a4 in make_child (s=0x80244b268, slot=5) at prefork.c:800 #15 0x000000000046af06 in prefork_run (_pconf=<value optimized out>, plog=<value optimized out>, s=<value optimized out>) at prefork.c:902 #16 0x00000000004360b2 in ap_run_mpm (pconf=0x802423028, plog=0x80244f028, s=0x80244b268) at mpm_common.c:96 #17 0x000000000043021b in main (argc=2, argv=0x7fffffffdd18) at main.c:777 -- Edit bug report at https://bugs.php.net/bug.php?id=67489&edit=1 --