Bug #68173 [NEW]: SIGSEV cURLing over SSL

From: pegasus at vaultwiki dot org Operating system: Centos 6 64-bit PHP version: master-Git-2014-10-07 (Git) Package: Reproducible crash Bug Type: Bug Bug description:SIGSEV cURLing over SSL Description: ------------ The backtrace shows a failure in libcurl.so. However, there is no SIGSEV under PHP 5.6, and multiple versions of OpenSSL yielded the same results. Expected result: ---------------- No crash. Actual result: -------------- #0 0x00000032cc61ee22 in ?? () from /usr/lib64/libcurl.so.4 #1 0x00000032cc6222f0 in Curl_close () from /usr/lib64/libcurl.so.4 #2 0x00000000005f2ed3 in _php_curl_close_ex (ch=0x7f239390ec80) at /root/php-src/ext/curl/interface.c:3164 #3 0x00000000005f3232 in _php_curl_close (rsrc=0x7f239382e680) at /root/php-src/ext/curl/interface.c:3217 #4 0x00000000009a8527 in zend_resource_dtor (res=0x7f239382e680) at /root/php-src/Zend/zend_list.c:72 #5 0x00000000009a89b4 in list_entry_destructor (zv=0x7fff36f67b90) at /root/php-src/Zend/zend_list.c:170 #6 0x00000000009a4dc8 in _zend_hash_del_el_ex (ht=0x14d6368, idx=75, p=0x7f239391c960, prev=0x0) at /root/php-src/Zend/zend_hash.c:638 #7 0x00000000009a56ed in zend_hash_index_del (ht=0x14d6368, h=129) at /root/php-src/Zend/zend_hash.c:871 #8 0x00000000009a84d3 in _zend_list_free (res=0x7f239382e680) at /root/php-src/Zend/zend_list.c:59 #9 0x000000000098f221 in _zval_dtor_func_for_ptr (p=0x7f239382e680, __zend_filename=0xf5ffa8 "/root/php-src/Zend/zend_objects.c", __zend_lineno=61) at /root/php-src/Zend/zend_variables.c:132 #10 0x0000000000977501 in i_zval_ptr_dtor (zval_ptr=0x7f239399d050, __zend_filename=0xf5ffa8 "/root/php-src/Zend/zend_objects.c", __zend_lineno=61) at /root/php-src/Zend/zend_execute.h:59 #11 0x0000000000978b8f in _zval_ptr_dtor (zval_ptr=0x7f239399d050, __zend_filename=0xf5ffa8 "/root/php-src/Zend/zend_objects.c", __zend_lineno=61) at /root/php-src/Zend/zend_execute_API.c:489 #12 0x00000000009caace in zend_object_std_dtor (object=0x7f239399d000) at /root/php-src/Zend/zend_objects.c:61 #13 0x00000000009d186b in zend_objects_store_del (object=0x7f239399d000) at /root/php-src/Zend/zend_objects_API.c:181 #14 0x000000000098f20b in _zval_dtor_func_for_ptr (p=0x7f239399d000, __zend_filename=0xf5b968 "/root/php-src/Zend/zend_variables.c", __zend_lineno=296) at /root/php-src/Zend/zend_variables.c:124 #15 0x0000000000977501 in i_zval_ptr_dtor (zval_ptr=0x7f23939961d0, __zend_filename=0xf5b968 "/root/php-src/Zend/zend_variables.c", __zend_lineno=296) at /root/php-src/Zend/zend_execute.h:59 #16 0x0000000000978b8f in _zval_ptr_dtor (zval_ptr=0x7f23939961d0, __zend_filename=0xf5b968 "/root/php-src/Zend/zend_variables.c", __zend_lineno=296) at /root/php-src/Zend/zend_execute_API.c:489 #17 0x000000000098f86b in _zval_ptr_dtor_wrapper (zval_ptr=0x7f23939961d0) at /root/php-src/Zend/zend_variables.c:296 #18 0x00000000009a57ef in zend_hash_destroy (ht=0x7f23939bf848) at /root/php-src/Zend/zend_hash.c:896 #19 0x000000000098f192 in _zval_dtor_func_for_ptr (p=0x7f23939bf840, __zend_filename=0xb07540 "/root/php-src/ext/curl/interface.c", __zend_lineno=3178) at /root/php-src/Zend/zend_variables.c:108 #20 0x0000000000977501 in i_zval_ptr_dtor (zval_ptr=0x7f23939a36e0, __zend_filename=0xb07540 "/root/php-src/ext/curl/interface.c", __zend_lineno=3178) at /root/php-src/Zend/zend_execute.h:59 #21 0x0000000000978b8f in _zval_ptr_dtor (zval_ptr=0x7f23939a36e0, __zend_filename=0xb07540 "/root/php-src/ext/curl/interface.c", __zend_lineno=3178) at /root/php-src/Zend/zend_execute_API.c:489 #22 0x00000000005f3017 in _php_curl_close_ex (ch=0x7f239390ec80) at /root/php-src/ext/curl/interface.c:3178 #23 0x00000000005f3232 in _php_curl_close (rsrc=0x7f239382e680) at /root/php-src/ext/curl/interface.c:3217 #24 0x00000000009a8527 in zend_resource_dtor (res=0x7f239382e680) at /root/php-src/Zend/zend_list.c:72 #25 0x00000000009a8b1c in zend_close_rsrc (zv=0x7f239391c970) at /root/php-src/Zend/zend_list.c:214 #26 0x00000000009a61ba in zend_hash_reverse_apply (ht=0x14d6368, apply_func=0x9a8aee <zend_close_rsrc>) at /root/php-src/Zend/zend_hash.c:1126 #27 0x00000000009a8b42 in zend_close_rsrc_list (ht=0x14d6368) at /root/php-src/Zend/zend_list.c:222 #28 0x00000000009785d1 in shutdown_executor () at /root/php-src/Zend/zend_execute_API.c:334 #29 0x0000000000991832 in zend_deactivate () at /root/php-src/Zend/zend.c:900 #30 0x00000000009036f7 in php_request_shutdown (dummy=0x0) at /root/php-src/main/main.c:1859 #31 0x0000000000a62b99 in main (argc=8, argv=0x7fff36f6a9b8) at /root/php-src/sapi/fpm/fpm/fpm_main.c:1976 -- Edit bug report at https://bugs.php.net/bug.php?id=68173&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=68173&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=68173&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=68173&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=68173&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=68173&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=68173&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=68173&r=needscript Try newer version: https://bugs.php.net/fix.php?id=68173&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=68173&r=support Expected behavior: https://bugs.php.net/fix.php?id=68173&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=68173&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=68173&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=68173&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=68173&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=68173&r=dst IIS Stability: https://bugs.php.net/fix.php?id=68173&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=68173&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=68173&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=68173&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=68173&r=mysqlcfg