Bug #68496 [Com]: Segfault on php 5.5.19

Edit report at https://bugs.php.net/bug.php?id=68496&edit=1 ID: 68496 Comment by: francesco at versiliaservices dot com Reported by: Mr dot Miteshah at gmail dot com Summary: Segfault on php 5.5.19 Status: Open Type: Bug Package: opcache Operating System: Ubuntu 14.04.1 PHP Version: 5.5.19 Block user comment: N Private report: N New Comment: 2 similar crashes, probably related. latest php-fpm 5.6.4 Program terminated with signal 11, Segmentation fault. #0 zend_hash_clean (ht=0x7ffa46bda5b8) at /usr/src/php-5.6.4/Zend/zend_hash.c:582 582 p = p->pListNext; (gdb) bt #0 zend_hash_clean (ht=0x7ffa46bda5b8) at /usr/src/php-5.6.4/Zend/zend_hash.c:582 #1 0x000000000066aa2b in zend_cleanup_op_array_data (function=<value optimized out>) at /usr/src/php-5.6.4/Zend/zend_opcode.c:134 #2 zend_cleanup_function_data (function=<value optimized out>) at /usr/src/php-5.6.4/Zend/zend_opcode.c:141 #3 0x00000000006823e3 in zend_hash_reverse_apply (ht=0x20c16a0, apply_func=0x66aa00 <zend_cleanup_function_data>) at /usr/src/php-5.6.4/Zend/zend_hash.c:729 #4 0x000000000066837b in shutdown_executor () at /usr/src/php-5.6.4/Zend/zend_execute_API.c:286 #5 0x0000000000675632 in zend_deactivate () at /usr/src/php-5.6.4/Zend/zend.c:963 #6 0x0000000000614efd in php_request_shutdown (dummy=<value optimized out>) at /usr/src/php-5.6.4/main/main.c:1884 #7 0x0000000000721479 in main (argc=<value optimized out>, argv=<value optimized out>) at /usr/src/php-5.6.4/sapi/fpm/fpm/fpm_main.c:1988 and Program terminated with signal 11, Segmentation fault. #0 0x00000030eac83aae in __memset_sse2 () from /lib64/libc.so.6 (gdb) (gdb) bt #0 0x00000030eac83aae in __memset_sse2 () from /lib64/libc.so.6 #1 0x00000000006827f9 in zend_hash_clean (ht=0x7ffa46bda5b8) at /usr/src/php-5.6.4/Zend/zend_hash.c:572 #2 0x000000000066aa2b in zend_cleanup_op_array_data (function=<value optimized out>) at /usr/src/php-5.6.4/Zend/zend_opcode.c:134 #3 zend_cleanup_function_data (function=<value optimized out>) at /usr/src/php-5.6.4/Zend/zend_opcode.c:141 #4 0x00000000006823e3 in zend_hash_reverse_apply (ht=0x20c16a0, apply_func=0x66aa00 <zend_cleanup_function_data>) at /usr/src/php-5.6.4/Zend/zend_hash.c:729 #5 0x000000000066837b in shutdown_executor () at /usr/src/php-5.6.4/Zend/zend_execute_API.c:286 #6 0x0000000000675632 in zend_deactivate () at /usr/src/php-5.6.4/Zend/zend.c:963 #7 0x0000000000614efd in php_request_shutdown (dummy=<value optimized out>) at /usr/src/php-5.6.4/main/main.c:1884 #8 0x0000000000721479 in main (argc=<value optimized out>, argv=<value optimized out>) at /usr/src/php-5.6.4/sapi/fpm/fpm/fpm_main.c:1988 Previous Comments: ------------------------------------------------------------------------ [2014-11-25 07:14:39] Mr dot Miteshah at gmail dot com Description: ------------ _^[root@example.com:/var/log/nginx]# lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 14.04.1 LTS Release: 14.04 Codename: trusty php -v PHP 5.5.19-1+deb.sury.org~trusty+1 (cli) (built: Nov 19 2014 19:33:43) Copyright (c) 1997-2014 The PHP Group Zend Engine v2.5.0, Copyright (c) 1998-2014 Zend Technologies with Zend OPcache v7.0.4-dev, Copyright (c) 1999-2014, by Zend Technologies with Xdebug v2.2.5, Copyright (c) 2002-2014, by Derick Rethans ^_^[root@example.com:/var/log/nginx]# dpkg -l | grep php ii php-pear 5.5.19+dfsg-1+deb.sury.org~trusty+1 all PEAR - PHP Extension and Application Repository ii php5-cli 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 command-line interpreter for the php5 scripting language ii php5-common 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 Common files for packages built from the php5 source ii php5-curl 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 CURL module for php5 ii php5-dbg 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 Debug symbols for PHP5 ii php5-fpm 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 server-side, HTML-embedded scripting language (FPM-CGI binary) ii php5-gd 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 GD module for php5 ii php5-geoip 1.1.0-1+deb.sury.org~trusty+1 amd64 GeoIP module for php5 rc php5-imap 5.4.27-1+deb.sury.org~precise+1 amd64 IMAP module for php5 ii php5-json 1.3.6-1+deb.sury.org~trusty+1 amd64 JSON module for php5 ii php5-mcrypt 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 MCrypt module for php5 ii php5-memcache 3.0.8-4+deb.sury.org~trusty+1 amd64 memcache extension module for PHP5 ii php5-mysqlnd 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 MySQL module for php5 (Native Driver) ii php5-readline 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 Readline module for php5 ii php5-xdebug 2.2.5-1+deb.sury.org~trusty+1 amd64 Xdebug Module for PHP 5 ii php5-xmlrpc 5.5.19+dfsg-1+deb.sury.org~trusty+1 amd64 XML-RPC module for php5 ^_^[root@example.com:/var/log/nginx]# ee info php PHP (5.5.19-1): user www-data expose_php Off memory_limit 512M post_max_size 100M upload_max_filesize 100M max_execution_time 300 Information about www.conf ping.path /ping pm.status_path /status process_manager ondemand pm.max_requests 500 pm.max_children 100 pm.start_servers 20 pm.min_spare_servers 10 pm.max_spare_servers 30 request_terminate_timeout 300 xdebug.profiler_enable_trigger off listen 127.0.0.1:9000 Information about debug.conf ping.path /ping pm.status_path /status process_manager ondemand pm.max_requests 500 pm.max_children 100 pm.start_servers 20 pm.min_spare_servers 10 pm.max_spare_servers 30 request_terminate_timeout 300 xdebug.profiler_enable_trigger on listen 127.0.0.1:9001 Expected result: ---------------- Should not found segfault in kern.log Actual result: -------------- # gdb output 1 gdb /usr/sbin/php5-fpm core-php5-fpm.17609 GNU gdb (Ubuntu 7.7.1-0ubuntu5~14.04.2) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/sbin/php5-fpm...Reading symbols from /usr/lib/debug/.build-id/04/d0d258938bbeb32d9664c595f48832d4fa3f4f.debug...done. done. [New LWP 17609] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `php-fpm: pool www '. Program terminated with signal SIGSEGV, Segmentation fault. #0 zend_hash_clean (ht=0x7f4c89f34ab8) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:583 583 /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c: No such file or directory. gdb) bt #0 zend_hash_clean (ht=0x7f4c89f34ab8) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:583 #1 0x00000000006c603b in zend_cleanup_op_array_data (op_array=<optimized out>) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_opcode.c:134 #2 zend_cleanup_function_data (function=<optimized out>) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_opcode.c:141 #3 0x00000000006df5f4 in zend_hash_reverse_apply (ht=0x10eec10, apply_func=0x6c6010 <zend_cleanup_function_data>) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:799 #4 0x00000000006c1a3c in shutdown_executor () at /build/buildd/php5-5.5.19+dfsg/Zend/zend_execute_API.c:286 #5 0x00000000006d1532 in zend_deactivate () at /build/buildd/php5-5.5.19+dfsg/Zend/zend.c:949 #6 0x000000000067159d in php_request_shutdown (dummy=dummy@entry=0x0) at /build/buildd/php5-5.5.19+dfsg/main/main.c:1808 #7 0x0000000000461d24 in main (argc=<optimized out>, argv=<optimized out>) at /build/buildd/php5-5.5.19+dfsg/sapi/fpm/fpm/fpm_main.c:1977 # gdb output 2 gdb /usr/sbin/php5-fpm /tmp/core-php5-fpm.20105 GNU gdb (Ubuntu 7.7.1-0ubuntu5~14.04.2) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/sbin/php5-fpm...Reading symbols from /usr/lib/debug/.build-id/04/d0d258938bbeb32d9664c595f48832d4fa3f4f.debug...done. done. [New LWP 20105] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `php-fpm: pool www '. Program terminated with signal SIGSEGV, Segmentation fault. #0 _zend_mm_free_int (heap=0x10ee300, p=0x7f4cb62fcc40) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_alloc.c:2104 2104 /build/buildd/php5-5.5.19+dfsg/Zend/zend_alloc.c: No such file or directory. (gdb) bt #0 _zend_mm_free_int (heap=0x10ee300, p=0x7f4cb62fcc40) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_alloc.c:2104 #1 0x00000000006c66b2 in destroy_op_array (op_array=0x15ae020) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_opcode.c:361 #2 0x00000000006ddac5 in zend_hash_apply_deleter (ht=ht@entry=0x10eec10, p=p@entry=0x13ea210) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:650 #3 0x00000000006df609 in zend_hash_reverse_apply (ht=0x10eec10, apply_func=apply_func@entry=0x6c1360 <clean_non_persistent_function>) at /build/buildd/php5-5.5.19+dfsg/Zend/zend_hash.c:804 #4 0x00000000006c1b70 in shutdown_executor () at /build/buildd/php5-5.5.19+dfsg/Zend/zend_execute_API.c:302 #5 0x00000000006d1532 in zend_deactivate () at /build/buildd/php5-5.5.19+dfsg/Zend/zend.c:949 #6 0x000000000067159d in php_request_shutdown (dummy=dummy@entry=0x0) at /build/buildd/php5-5.5.19+dfsg/main/main.c:1808 #7 0x0000000000461d24 in main (argc=<optimized out>, argv=<optimized out>) at /build/buildd/php5-5.5.19+dfsg/sapi/fpm/fpm/fpm_main.c:1977 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=68496&edit=1