Bug #68348 [NEW]: SIGSEGV in zend_hash_destroy at L558 p = p->pListNext;

From: Date: Wed, 05 Nov 2014 11:57:11 +0000
Subject: Bug #68348 [NEW]: SIGSEGV in zend_hash_destroy at L558 p = p->pListNext;
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-188458@lists.php.net to get a copy of this message
From:             php dot net at danslereseau dot com
Operating system: Amazon Linux 2014.09
PHP version:      5.5.18
Package:          *General Issues
Bug Type:         Bug
Bug description:SIGSEGV in zend_hash_destroy at L558 p = p->pListNext;

Description:
------------
nginx and PHP-FPM55 (5.5.18) installed using yum, on Amazon Linux
x86_64, on an AWS EC2 server.
PHP-FPM crashes when I try to load one of the many websites I host; the
other websites are OK. The website in question is a Gallery3 install.

/var/log/messages shows:
Nov  5 11:42:43 ip-172-30-0-123 kernel: [460777.618255] traps:
php-fpm-5.5[28269] general protection ip:59fbf9 sp:7fffafda91b0 error:0
in php-fpm-5.5[400000+2fa000]

GDB Stack trace:
#0  zend_hash_destroy (ht=0x7f95e0225a70) at
/usr/src/debug/php-5.5.18/Zend/zend_hash.c:558
#1  0x000000000059101b in _zval_dtor_func (zvalue=0x7f95e02340a8) at
/usr/src/debug/php-5.5.18/Zend/zend_variables.c:45
#2  0x000000000063ec8d in _zval_dtor (zvalue=0x7f95e02340a8) at
/usr/src/debug/php-5.5.18/Zend/zend_variables.h:35
#3  i_zval_ptr_dtor (zval_ptr=0x7f95e02340a8) at
/usr/src/debug/php-5.5.18/Zend/zend_execute.h:81
#4  i_free_compiled_variables (execute_data=0x7f95f8689cf8) at
/usr/src/debug/php-5.5.18/Zend/zend_execute.c:1510
#5  zend_leave_helper_SPEC
(execute_data=execute_data@entry=0x7f95f8689cf8) at
/usr/src/debug/php-5.5.18/Zend/zend_vm_execute.h:399
#6  0x000000000063f3bf in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER
(execute_data=0x7f95f8689cf8) at
/usr/src/debug/php-5.5.18/Zend/zend_vm_execute.h:1081
#7  0x00000000005bc088 in execute_ex (execute_data=0x7f95f8689cf8) at
/usr/src/debug/php-5.5.18/Zend/zend_vm_execute.h:363
#8  0x0000000000581c39 in dtrace_execute_ex (execute_data=<optimized
out>) at /usr/src/debug/php-5.5.18/Zend/zend_dtrace.c:73
#9  0x0000000000583f71 in zend_call_function
(fci=fci@entry=0x7fff0dd0c5c0, fci_cache=<optimized out>,
fci_cache@entry=0x0) at
/usr/src/debug/php-5.5.18/Zend/zend_execute_API.c:937
#10 0x000000000058416e in call_user_function_ex
(function_table=function_table@entry=0xf9fc40, object_pp=<optimized
out>, function_name=<optimized out>,
retval_ptr_ptr=retval_ptr_ptr@entry=0x7fff0dd0c658,
param_count=<optimized out>, params=params@entry=0x7f95f86bb850,
no_separation=no_separation@entry=1,
symbol_table=symbol_table@entry=0x0) at
/usr/src/debug/php-5.5.18/Zend/zend_execute_API.c:725
#11 0x00000000005841c2 in call_user_function (function_table=0xf9fc40,
object_pp=object_pp@entry=0x0,
function_name=function_name@entry=0x130f5f8, retval_ptr=0x1303a98,
param_count=param_count@entry=2, params=params@entry=0x7fff0dd0c6c0) at
/usr/src/debug/php-5.5.18/Zend/zend_execute_API.c:698
#12 0x000000000049bc7c in ps_call_handler (func=0x130f5f8,
argc=argc@entry=2, argv=argv@entry=0x7fff0dd0c6c0) at
/usr/src/debug/php-5.5.18/ext/session/mod_user.c:53
#13 0x000000000049bf85 in ps_write_user (mod_data=<optimized out>,
key=0x12e6cb8 "993g0n8iviv2rugd5rtdrucnt3", val=0x65b1ad "", vallen=0)
at /usr/src/debug/php-5.5.18/ext/session/mod_user.c:157
#14 0x0000000000493eb8 in php_session_save_current_state () at
/usr/src/debug/php-5.5.18/ext/session/session.c:544
#15 0x00000000004944d6 in php_session_flush () at
/usr/src/debug/php-5.5.18/ext/session/session.c:1619
#16 zm_deactivate_session (type=<optimized out>,
module_number=<optimized out>) at
/usr/src/debug/php-5.5.18/ext/session/session.c:2348
#17 0x0000000000599514 in zend_deactivate_modules () at
/usr/src/debug/php-5.5.18/Zend/zend_API.c:2433
#18 0x0000000000532225 in php_request_shutdown (dummy=dummy@entry=0x0)
at /usr/src/debug/php-5.5.18/main/main.c:1777
#19 0x0000000000421934 in main (argc=<optimized out>, argv=<optimized
out>) at /usr/src/debug/php-5.5.18/sapi/fpm/fpm/fpm_main.c:1977

Test script:
---------------
I have yet to find what code or extension would be triggering this.
It happens 100% of the time when loading my Gallery3 install, and
sometimes on a Wordpress install (not often), but from I saw, not on any
other (simpler) website I host, which also use PHP.


-- 
Edit bug report at https://bugs.php.net/bug.php?id=68348&edit=1
-- 
Try a snapshot (PHP 5.4):   https://bugs.php.net/fix.php?id=68348&r=trysnapshot54
Try a snapshot (PHP 5.5):   https://bugs.php.net/fix.php?id=68348&r=trysnapshot55
Try a snapshot (trunk):     https://bugs.php.net/fix.php?id=68348&r=trysnapshottrunk
Fixed in SVN:               https://bugs.php.net/fix.php?id=68348&r=fixed
Fixed in release:           https://bugs.php.net/fix.php?id=68348&r=alreadyfixed
Need backtrace:             https://bugs.php.net/fix.php?id=68348&r=needtrace
Need Reproduce Script:      https://bugs.php.net/fix.php?id=68348&r=needscript
Try newer version:          https://bugs.php.net/fix.php?id=68348&r=oldversion
Not developer issue:        https://bugs.php.net/fix.php?id=68348&r=support
Expected behavior:          https://bugs.php.net/fix.php?id=68348&r=notwrong
Not enough info:            https://bugs.php.net/fix.php?id=68348&r=notenoughinfo
Submitted twice:            https://bugs.php.net/fix.php?id=68348&r=submittedtwice
register_globals:           https://bugs.php.net/fix.php?id=68348&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=68348&r=php4
Daylight Savings:           https://bugs.php.net/fix.php?id=68348&r=dst
IIS Stability:              https://bugs.php.net/fix.php?id=68348&r=isapi
Install GNU Sed:            https://bugs.php.net/fix.php?id=68348&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=68348&r=float
No Zend Extensions:         https://bugs.php.net/fix.php?id=68348&r=nozend
MySQL Configuration Error:  https://bugs.php.net/fix.php?id=68348&r=mysqlcfg



Thread (8 messages)

« previous php.bugs (#188458) next »