Bug #68496 [NEW]: Segfault on php 5.5.19

From: Mr dot Miteshah at gmail dot com Operating system: Ubuntu 14.04.1 PHP version: 5.5.19 Package: opcache Bug Type: Bug Bug description:Segfault on php 5.5.19 Description: ------------ _^[root@example.com:/var/log/nginx]# lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 14.04.1 LTS Release: 14.04 Codename: trusty php -v PHP 5.5.19-1+deb.sury.org~trusty+1 (cli) (built: Nov 19 2014 19:33:43) Copyright (c) 1997-2014 The PHP Group Zend Engine v2.5.0, Copyright (c) 1998-2014 Zend Technologies with Zend OPcache v7.0.4-dev, Copyright (c) 1999-2014, by Zend Technologies with Xdebug v2.2.5, Copyright (c) 2002-2014, by Derick Rethans ^_^[root@example.com:/var/log/nginx]# dpkg -l | grep php ii php-pear 5.5.19+dfsg-1+deb.sury.org~trusty+1 all PEAR - PHP Extension and Application Repository ii php5-cli 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 command-line interpreter for the php5 scripting language ii php5-common 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 Common files for packages built from the php5 source ii php5-curl 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 CURL module for php5 ii php5-dbg 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 Debug symbols for PHP5 ii php5-fpm 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 server-side, HTML-embedded scripting language (FPM-CGI binary) ii php5-gd 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 GD module for php5 ii php5-geoip 1.1.0-1+deb.sury.org~trusty+1 amd64 GeoIP module for php5 rc php5-imap 5.4.27-1+deb.sury.org~precise+1 amd64 IMAP module for php5 ii php5-json 1.3.6-1+deb.sury.org~trusty+1 amd64 JSON module for php5 ii php5-mcrypt 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 MCrypt module for php5 ii php5-memcache 3.0.8-4+deb.sury.org~trusty+1 amd64 memcache extension module for PHP5 ii php5-mysqlnd 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 MySQL module for php5 (Native Driver) ii php5-readline 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 Readline module for php5 ii php5-xdebug 2.2.5-1+deb.sury.org~trusty+1 amd64 Xdebug Module for PHP 5 ii php5-xmlrpc 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 XML-RPC module for php5 ^_^[root@example.com:/var/log/nginx]# ee info php PHP (5.5.19-1): user www-data expose_php Off memory_limit 512M post_max_size 100M upload_max_filesize 100M max_execution_time 300 Information about www.conf ping.path /ping pm.status_path /status process_manager ondemand pm.max_requests 500 pm.max_children 100 pm.start_servers 20 pm.min_spare_servers 10 pm.max_spare_servers 30 request_terminate_timeout 300 xdebug.profiler_enable_trigger off listen 127.0.0.1:9000 Information about debug.conf ping.path /ping pm.status_path /status process_manager ondemand pm.max_requests 500 pm.max_children 100 pm.start_servers 20 pm.min_spare_servers 10 pm.max_spare_servers 30 request_terminate_timeout 300 xdebug.profiler_enable_trigger on listen 127.0.0.1:9001 Expected result: ---------------- Should not found segfault in kern.log Actual result: -------------- # gdb output 1 gdb /usr/sbin/php5-fpm core-php5-fpm.17609 GNU gdb (Ubuntu 7.7.1-0ubuntu5~14.04.2) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/sbin/php5-fpm...Reading symbols from /usr/lib/debug/.build-id/04/d0d258938bbeb32d9664c595f48832d4fa3f4f.debug...done. done. [New LWP 17609] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `php-fpm: pool www '. Program terminated with signal SIGSEGV, Segmentation fault. #0 zend_hash_clean (ht=0x7f4c89f34ab8) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:583 583 /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c: No such file or directory. gdb) bt #0 zend_hash_clean (ht=0x7f4c89f34ab8) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:583 #1 0x00000000006c603b in zend_cleanup_op_array_data (op_array=<optimized out>) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_opcode.c:134 #2 zend_cleanup_function_data (function=<optimized out>) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_opcode.c:141 #3 0x00000000006df5f4 in zend_hash_reverse_apply (ht=0x10eec10, apply_func=0x6c6010 <zend_cleanup_function_data>) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:799 #4 0x00000000006c1a3c in shutdown_executor () at /build/buildd/php5-5.5.19+dfsg/Zend/zend_execute_API.c:286 #5 0x00000000006d1532 in zend_deactivate () at /build/buildd/php5-5.5.19+dfsg/Zend/zend.c:949 #6 0x000000000067159d in php_request_shutdown (dummy=dummy@entry=0x0) at /build/buildd/php5-5.5.19+dfsg/main/main.c:1808 #7 0x0000000000461d24 in main (argc=<optimized out>, argv=<optimized out>) at /build/buildd/php5-5.5.19+dfsg/sapi/fpm/fpm/fpm_main.c:1977 # gdb output 2 gdb /usr/sbin/php5-fpm /tmp/core-php5-fpm.20105 GNU gdb (Ubuntu 7.7.1-0ubuntu5~14.04.2) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/sbin/php5-fpm...Reading symbols from /usr/lib/debug/.build-id/04/d0d258938bbeb32d9664c595f48832d4fa3f4f.debug...done. done. [New LWP 20105] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `php-fpm: pool www '. Program terminated with signal SIGSEGV, Segmentation fault. #0 _zend_mm_free_int (heap=0x10ee300, p=0x7f4cb62fcc40) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_alloc.c:2104 2104 /build/buildd/php5-5.5.19+dfsg/Zend/zend_alloc.c: No such file or directory. (gdb) bt #0 _zend_mm_free_int (heap=0x10ee300, p=0x7f4cb62fcc40) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_alloc.c:2104 #1 0x00000000006c66b2 in destroy_op_array (op_array=0x15ae020) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_opcode.c:361 #2 0x00000000006ddac5 in zend_hash_apply_deleter (ht=ht@entry=0x10eec10, p=p@entry=0x13ea210) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:650 #3 0x00000000006df609 in zend_hash_reverse_apply (ht=0x10eec10, apply_func=apply_func@entry=0x6c1360 <clean_non_persistent_function>) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:804 #4 0x00000000006c1b70 in shutdown_executor () at /build/buildd/php5-5.5.19+dfsg/Zend/zend_execute_API.c:302 #5 0x00000000006d1532 in zend_deactivate () at /build/buildd/php5-5.5.19+dfsg/Zend/zend.c:949 #6 0x000000000067159d in php_request_shutdown (dummy=dummy@entry=0x0) at /build/buildd/php5-5.5.19+dfsg/main/main.c:1808 #7 0x0000000000461d24 in main (argc=<optimized out>, argv=<optimized out>) at /build/buildd/php5-5.5.19+dfsg/sapi/fpm/fpm/fpm_main.c:1977 -- Edit bug report at https://bugs.php.net/bug.php?id=68496&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=68496&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=68496&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=68496&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=68496&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=68496&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=68496&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=68496&r=needscript Try newer version: https://bugs.php.net/fix.php?id=68496&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=68496&r=support Expected behavior: https://bugs.php.net/fix.php?id=68496&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=68496&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=68496&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=68496&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=68496&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=68496&r=dst IIS Stability: https://bugs.php.net/fix.php?id=68496&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=68496&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=68496&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=68496&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=68496&r=mysqlcfg